Delta Electronics DIAEnergie SQL Injection Vulnerability (CNVD-2022-36031)

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency. A SQL injection vulnerability exists, which stems from a blind SQ injection in HandlerChart.ashx. The vulnerability can be exploited to inject arbitrary SQL queries, retrieve and modify database content, and execute system commands.