Delta Electronics DIAEnergie
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, disclose sensitive information, or disrupt system availability.
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-25574US | critical9.8 | — | ||
SQL injection vulnerability exists in GetDIAE_usListParameters.
| ||||
| CVE-2024-28171US | — | — | ||
It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the origina… | ||||
| CVE-2024-28045US | medium5.4 | — | ||
Improper neutralization of input within the affected product could lead to cross-site scripting.
| ||||
| CVE-2024-28040US | — | — | ||
SQL injection vulnerability exists in GetDIAE_astListParameters.
| ||||
| CVE-2024-25567US | high8.8 | — | ||
Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file sys… | ||||
| CVE-2024-23975US | — | — | ||
SQL injection vulnerability exists in GetDIAE_slogListParameters.
| ||||
| CVE-2024-23494US | — | — | ||
SQL injection vulnerability exists in GetDIAE_unListParameters.
| ||||
| CVE-2024-28891US | — | — | ||
SQL injection vulnerability exists in the script Handler_CFG.ashx.
| ||||
| CVE-2024-28029US | high8.8 | — | ||
Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality. | ||||
| CVE-2024-25937US | high8.8 | — | ||
SQL injection vulnerability exists in the script DIAE_tagHandler.ashx.
| ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-074-12 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-074-12 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (10)
- FixedDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - FixedDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - FixedDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - FixedDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - FixedDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - FixedDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - FixedDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - FixedDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - FixedDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - FixedDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan