Description
The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckIoTHubNameExisted. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Delta Electronics | DIAEnergie | All – < v1.9.01.002 | v1.9.01.002 |
Advisories 1
- ICSA-22-298-06 Delta Electronics DIAEnergie CISA ICS & IT advisories · Feb 16, 2023