CVE-2024-28891 Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in the script HandlerCFG.ashx...

CVE-2024-28891

Delta Electronics DIAEnergie is affected by a SQL injection in the Handler_CFG.ashx script (CWE-89). The ICS advisory (I CS A-24-074-12) and CNA entries identify the vulnerability as CVE-2024-28891 with a CVSS v3.1 score of 8.8 (High). The issue arises from improper neutralization of SQL commands...