ICSA-22-081-01

icsaUScisa_csaf_ot

Delta Electronics DIAEnergie (Update C)

view advisory published 2022-03-22

Successful exploitation of these vulnerabilities could allow remote code execution, causing a user to carry out an action unintentionally.

01

describes (29)

Related CVEs.

IDseverity exploitable
CVE-2022-1378UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx. This allows an attacker to inject arbitrary S…
CVE-2022-1377UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_rltHandler.ashx. This allows an attacker to inject arbitrary…
CVE-2022-1376UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_privgrpHandler.ashx. This allows an attacker to inject arbitr…
CVE-2022-1375UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_slogHandler.ashx. This allows an attacker to inject arbitrary…
CVE-2022-1374UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_unHandler.ashx. This allows an attacker to inject arbitrary S…
CVE-2022-1372UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in dlSlog.aspx. This allows an attacker to inject arbitrary SQL queri…
CVE-2022-1371UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegf. This allows an attacker to inject arbitrary SQL queries,…
CVE-2022-1370UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadREGbyID. This allows an attacker to inject arbitrary SQL queri…
CVE-2022-1369UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegIND. This allows an attacker to inject arbitrary SQL querie…
CVE-2022-1367UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx. This allows an attacker to inject arbitrary SQL…
CVE-2022-1366UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx. This allows an attacker to inject arbitrary SQL…
CVE-2022-1098UShigh7.8—
Delta Electronics DIAEnergie (all versions prior to 1.8.02.004) are vulnerable to a DLL hijacking condition. When combined with the Incorrect Default Permissions vulnerability of 4…
CVE-2022-27175UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetCalcTagList. This allows an attacker to inject arbitrary S…
CVE-2022-26887UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_loopmapHandler.ashx. This allows an attacker to inject arbitr…
CVE-2022-26839UShigh7.8OT elevated—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the DIAEnergie application, which may allow an attacker to plant…
CVE-2022-26836UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Calendar. This allows an attacker to injec…
CVE-2022-26667UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetDemandAnalysisData. This allows an attacker to inject arbi…
CVE-2022-26666UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerECC.ashx. This allows an attacker to inject arbitrary SQL q…
CVE-2022-26514UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_tagHandler.ashx. This allows an attacker to inject arbit…
CVE-2022-26349UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_eccoefficientHandler.ashx. This allows an attacker to in…
showing 20 of 29
02

references

External citations — patches, advisories, analysis.

03

remediations (29)

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan