CVE-2022-40967

creationtimestamp| type| source ---|---|--- 2022-10-28 00:29:03+00:00| seen| https://t.me/cibsecurity/52186...

CVE-2022-40967

The affected product DIAEnergie versions prior to v1.9.01.002 is vulnerable to a SQL injection that exists in CheckIoTHubNameExisted. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries...

CVE-2022-40967

CVE-2022-40967 affects DIAEnergie prior to v1.9.01.002 and describes a SQL injection in the CheckIoTHubNameExisted path. The vulnerability can be exploited by a low-privileged, authenticated attacker to inject arbitrary SQL queries, with a CVSS v3 base score of 8.8 (HIGH impact: C/H, I/H, A/H) an...

CVE-2022-40967 Delta Electronics DIAEnergie

The affected product DIAEnergie versions prior to v1.9.01.002 is vulnerable to a SQL injection that exists in CheckIoTHubNameExisted. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries...