Delta Electronics DIAEnergie (Update C)
Successful exploitation of these vulnerabilities could allow an attacker to retrieve passwords in cleartext, remotely execute code, cause a user to carry out an action unintentionally, or log in and use the device with administrative privileges.
describes (13)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-0988US | high7.5OT elevated | — | ||
Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remot… | ||||
| CVE-2021-44544US | medium6.1 | — | ||
DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEn… | ||||
| CVE-2021-44471US | medium6.1 | — | ||
DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “name” of the script “DIAE_Ha… | ||||
| CVE-2021-31558US | medium6.1 | — | ||
DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “descr” of the script “DIAE_h… | ||||
| CVE-2021-23228US | medium6.1 | — | ||
DIAEnergie Version 1.7.5 and prior is vulnerable to a reflected cross-site scripting attack through error pages that are returned by “.NET Request.QueryString”. | ||||
| CVE-2021-38393US | critical9.8 | — | ||
A Blind SQL injection vulnerability exists in the /DataHandler/HandlerAlarmGroup.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not pro… | ||||
| CVE-2021-38391US | critical9.8 | — | ||
A Blind SQL injection vulnerability exists in the /DataHandler/AM/AM_Handler.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not properl… | ||||
| CVE-2021-38390US | critical9.8 | — | ||
A Blind SQL injection vulnerability exists in the /DataHandler/HandlerEnergyType.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not pro… | ||||
| CVE-2021-33003US | medium5.5OT elevated | — | ||
Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to retrieve passwords in cleartext due to a weak hashing algorithm. | ||||
| CVE-2021-32991US | medium4.3 | — | ||
Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cross-site request forgery, which may allow an attacker to cause a user to carry out an action unintentionally… | ||||
| CVE-2021-32983US | critical9.8 | — | ||
A Blind SQL injection vulnerability exists in the /DataHandler/Handler_CFG.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not properly… | ||||
| CVE-2021-32967US | critical9.8OT elevated | — | ||
Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to add a new administrative user without being authenticated or authorized, which may allow the attacker… | ||||
| CVE-2021-32955US | critical9.8 | — | ||
Delta Electronics DIAEnergie Version 1.7.5 and prior allows unrestricted file uploads, which may allow an attacker to remotely execute code. | ||||
references
External citations — patches, advisories, analysis.
remediations (13)
- MitigationDIAEnergie
Delta Electronics has fixed the reported vulnerabilities and recommends users upgrade to version 1.9 or later.
https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&q=DIAEnergie%20V1.9&sort_expr=cdate&sort_dir=DESC - MitigationDIAEnergie
Delta Electronics has fixed the reported vulnerabilities and recommends users upgrade to version 1.9 or later.
https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&q=DIAEnergie%20V1.9&sort_expr=cdate&sort_dir=DESC - MitigationDIAEnergie
Delta Electronics has fixed the reported vulnerabilities and recommends users upgrade to version 1.9 or later.
https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&q=DIAEnergie%20V1.9&sort_expr=cdate&sort_dir=DESC - MitigationDIAEnergie
Delta Electronics has fixed the reported vulnerabilities and recommends users upgrade to version 1.9 or later.
https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&q=DIAEnergie%20V1.9&sort_expr=cdate&sort_dir=DESC - MitigationDIAEnergie
Delta Electronics has fixed the reported vulnerabilities and recommends users upgrade to version 1.9 or later.
https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&q=DIAEnergie%20V1.9&sort_expr=cdate&sort_dir=DESC - MitigationDIAEnergie
Delta Electronics has fixed the reported vulnerabilities and recommends users upgrade to version 1.9 or later.
https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&q=DIAEnergie%20V1.9&sort_expr=cdate&sort_dir=DESC - MitigationDIAEnergie
Delta Electronics has fixed the reported vulnerabilities and recommends users upgrade to version 1.9 or later.
https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&q=DIAEnergie%20V1.9&sort_expr=cdate&sort_dir=DESC - MitigationDIAEnergie
Delta Electronics has fixed the reported vulnerabilities and recommends users upgrade to version 1.9 or later.
https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&q=DIAEnergie%20V1.9&sort_expr=cdate&sort_dir=DESC - MitigationDIAEnergie
Delta Electronics has fixed the reported vulnerabilities and recommends users upgrade to version 1.9 or later.
https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&q=DIAEnergie%20V1.9&sort_expr=cdate&sort_dir=DESC - MitigationDIAEnergie
Delta Electronics has fixed the reported vulnerabilities and recommends users upgrade to version 1.9 or later.
https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&q=DIAEnergie%20V1.9&sort_expr=cdate&sort_dir=DESC - MitigationDIAEnergie
Delta Electronics has fixed the reported vulnerabilities and recommends users upgrade to version 1.9 or later.
https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&q=DIAEnergie%20V1.9&sort_expr=cdate&sort_dir=DESC - MitigationDIAEnergie
Delta Electronics has fixed the reported vulnerabilities and recommends users upgrade to version 1.9 or later.
https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&q=DIAEnergie%20V1.9&sort_expr=cdate&sort_dir=DESC - MitigationDIAEnergie
Delta Electronics has fixed the reported vulnerabilities and recommends users upgrade to version 1.9 or later.
https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&q=DIAEnergie%20V1.9&sort_expr=cdate&sort_dir=DESC
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan