Lucene search
HistoryFeb 17, 2023 - 5:15 p.m.
CVE-2023-0822
improper authorization
unauthorized access
privileged functionality
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
40.0%
The affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorization and access privileged functionality.
Affected configurations
Node
deltawwdiaenergieRange<1.9.03.001
Related
cvelist
cvelist
CVE-2023-0822 Improper Authorization
2023-02-17 16:46:21
cve
cve
CVE-2023-0822
2023-02-17 17:15:11
prion
prion
Authorization
2023-02-17 17:15:00
ics
ics
Delta Electronics DIAEnergie (Update B)
2023-02-16 12:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
40.0%
Related for NVD:CVE-2023-0822