Lucene search
HistoryOct 26, 2022 - 6:15 p.m.
CVE-2022-43775
cve-2022-43775
hict_loop class
delta electronics
sql injection
code execution
remote system
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
53.8%
The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.
Affected configurations
Node
deltawwdiaenergieMatch1.9.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| deltaww | diaenergie | 1.9.0 | cpe:2.3:a:deltaww:diaenergie:1.9.0:*:*:*:*:*:*:* |
Related
prion
prion
Sql injection
2022-10-26 18:15:00
cvelist
cvelist
CVE-2022-43775
2022-10-26 00:00:00
cve
cve
CVE-2022-43775
2022-10-26 18:15:10
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
53.8%
Related for NVD:CVE-2022-43775