Lucene search
PRIOn knowledge basePRION:CVE-2021-38391HistoryAug 30, 2021 - 6:15 p.m.
Sql injection
2021-08-3018:15:00
PRIOn knowledge base
www.prio-n.com
6
0.002 Low
EPSS
Percentile
61.4%
A Blind SQL injection vulnerability exists in the /DataHandler/AM/AM_Handler.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not properly validate the user-controlled value supplied through the parameter type before using it as part of an SQL query. A remote, unauthenticated attacker can exploit this issue to execute arbitrary code in the context of NT SERVICE\MSSQLSERVER.
| CPE | Name | Operator | Version |
|---|---|---|---|
| diaenergie | le | 1.7.5 |
Related
nessus
nessus
Delta Electronics DIAEnergie Blind SQLi (CVE-2021-38391)
2022-06-06 00:00:00
cve
cve
CVE-2021-38391
2021-08-30 18:15:09
nvd
nvd
CVE-2021-38391
2021-08-30 18:15:09
checkpoint_advisories
checkpoint_advisories
Delta Electronics DIAEnergie SQL Injection (CVE-2021-38391)
2021-12-29 00:00:00
cvelist
cvelist
CVE-2021-38391
2021-08-30 17:30:50
cnvd
cnvd
DIAEnergie SQL Blind Injection Vulnerability (CNVD-2021-93914)
2021-08-27 00:00:00
ics
ics
Delta Electronics DIAEnergie (Update C)
2022-08-02 12:00:00