ICSA-22-081-01

icsaUScisa_csaf_ot

Delta Electronics DIAEnergie (Update C)

Advisory ansehen veröffentlicht 2022-03-22

Successful exploitation of these vulnerabilities could allow remote code execution, causing a user to carry out an action unintentionally.

01

beschreibt (29)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-1378UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx. This allows an attacker to inject arbitrary S…
CVE-2022-1377UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_rltHandler.ashx. This allows an attacker to inject arbitrary…
CVE-2022-1376UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_privgrpHandler.ashx. This allows an attacker to inject arbitr…
CVE-2022-1375UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_slogHandler.ashx. This allows an attacker to inject arbitrary…
CVE-2022-1374UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_unHandler.ashx. This allows an attacker to inject arbitrary S…
CVE-2022-1372UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in dlSlog.aspx. This allows an attacker to inject arbitrary SQL queri…
CVE-2022-1371UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegf. This allows an attacker to inject arbitrary SQL queries,…
CVE-2022-1370UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadREGbyID. This allows an attacker to inject arbitrary SQL queri…
CVE-2022-1369UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegIND. This allows an attacker to inject arbitrary SQL querie…
CVE-2022-1367UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx. This allows an attacker to inject arbitrary SQL…
CVE-2022-1366UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx. This allows an attacker to inject arbitrary SQL…
CVE-2022-1098UShigh7.8—
Delta Electronics DIAEnergie (all versions prior to 1.8.02.004) are vulnerable to a DLL hijacking condition. When combined with the Incorrect Default Permissions vulnerability of 4…
CVE-2022-27175UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetCalcTagList. This allows an attacker to inject arbitrary S…
CVE-2022-26887UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_loopmapHandler.ashx. This allows an attacker to inject arbitr…
CVE-2022-26839UShigh7.8OT erhöht—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the DIAEnergie application, which may allow an attacker to plant…
CVE-2022-26836UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Calendar. This allows an attacker to injec…
CVE-2022-26667UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetDemandAnalysisData. This allows an attacker to inject arbi…
CVE-2022-26666UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerECC.ashx. This allows an attacker to inject arbitrary SQL q…
CVE-2022-26514UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_tagHandler.ashx. This allows an attacker to inject arbit…
CVE-2022-26349UScritical9.8—
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_eccoefficientHandler.ashx. This allows an attacker to in…
20 von 29 angezeigt
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (29)

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

  • MitigationDIAEnergie

    Locate control system networks and remote devices behind firewalls and isolate them from the business network.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan