CVE-2022-41773

CVE-2022-41773 affects DIAEnergie versions prior to v1.9.01.002 and is a SQL injection in CheckDIACloud (stored/injected via GetDIAE_line_message_settingsListParameters path noted in ICS detail). A low-privileged authenticated user could inject arbitrary SQL queries. Reported CVSS v3.1 base score...