Description
Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to
1.9.03.009
have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Delta Electronics | DIAEnergy | all – < 1.9.03.009 | 1.9.03.009 |
Advisories 1
- ICSA-22-256-03 Delta Electronics DIAEnergie CISA ICS & IT advisories · Jun 1, 2023