CVE-2021-32991

2021-08-3017:12:38

CWE-352

icscert

www.cve.org

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.2%

JSON

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cross-site request forgery, which may allow an attacker to cause a user to carry out an action unintentionally.

CNA Affected

[
  {
    "product": "Delta Electronics DIAEnergie",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "DIAEnergie Version 1.7.5 and prior"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-238-03