SQL Injection Flaw in Delta Electronics DIAEnergy Product
CVE-2022-43775

9.8CRITICAL

Key Information:

Vendor

Deltaww

Status
Delta Electronics Diaenergie
Vendor
CVE Published:
26 October 2022

What is CVE-2022-43775?

The DIAEnergy v1.9 by Delta Electronics is affected by a SQL Injection vulnerability within the HICT_Loop class. This flaw could potentially allow attackers to execute arbitrary code on a remote system, posing significant security risks to users and organizations relying on the affected product.

Affected Version(s)

Delta Electronics DIAEnergie v1.9

References

https://www.tenable.com/security/research/tra-2022-33

EPSS Score

20% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.