Delta Electronics DIAEnergie
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, disclose sensitive information, or disrupt system availability.
beschreibt (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-25574US | critical9.8 | — | ||
SQL injection vulnerability exists in GetDIAE_usListParameters.
| ||||
| CVE-2024-28171US | — | — | ||
It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the origina… | ||||
| CVE-2024-28045US | medium5.4 | — | ||
Improper neutralization of input within the affected product could lead to cross-site scripting.
| ||||
| CVE-2024-28040US | — | — | ||
SQL injection vulnerability exists in GetDIAE_astListParameters.
| ||||
| CVE-2024-25567US | high8.8 | — | ||
Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file sys… | ||||
| CVE-2024-23975US | — | — | ||
SQL injection vulnerability exists in GetDIAE_slogListParameters.
| ||||
| CVE-2024-23494US | — | — | ||
SQL injection vulnerability exists in GetDIAE_unListParameters.
| ||||
| CVE-2024-28891US | — | — | ||
SQL injection vulnerability exists in the script Handler_CFG.ashx.
| ||||
| CVE-2024-28029US | high8.8 | — | ||
Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality. | ||||
| CVE-2024-25937US | high8.8 | — | ||
SQL injection vulnerability exists in the script DIAE_tagHandler.ashx.
| ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-24-074-12 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-074-12 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (10)
- BehobenDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - BehobenDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - BehobenDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - BehobenDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - BehobenDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - BehobenDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - BehobenDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - BehobenDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - BehobenDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService - BehobenDIAEnergie
Delta recommends updating to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
https://www.deltaww.com/en/customerService
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan