Delta Electronics DIAEnergie
view advisory published 2022-09-19
This updated advisory is a follow-up to the original advisory titled �ICSA-22-256-03 Delta Industrial Automation DIAEnergie� that was published September 19, 2022, on the ICS webpage on cisa.gov/ICS.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-3214US | critical9.8OT elevated | — | ||
Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to
1.9.03.009
have this… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-256-03 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-22-256-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- MitigationDIAEnergie
Delta Electronics fixed the reported vulnerability in Version 1.9 and recommends all users update affected systems.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan