CVE-2022-25347

Delta Electronics DIAEnergie is affected by CVE-2022-25347 (path traversal). All versions prior to 1.9 are susceptible to writing arbitrary files to the file system due to CWE-37. ICS advisories recommend upgrading to 1.9 or later and applying network/access controls to reduce exposure; no public...

CVE-2022-25347 Delta Electronics DIAEnergie Path Traversal

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files to locations on the file system...

CVE-2022-25980 Delta Electronics DIAEnergie SQL Injection in HandlerCommon.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerCommon.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-25980

Delta Electronics DIAEnergie is affected by a blind SQL injection vulnerability in HandlerCommon.ashx across all versions prior to 1.9, allowing an attacker to inject arbitrary SQL, access/modify data, and execute system commands. The issue is confirmed in the connected documents, which also list...

CVE-2022-25980 Delta Electronics DIAEnergie SQL Injection in HandlerCommon.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerCommon.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-26059 Delta Electronics DIAEnergie SQL Injection in GetQueryData

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-26059 Delta Electronics DIAEnergie SQL Injection in GetQueryData

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-26059

Delta Electronics DIAEnergie is affected by CVE-2022-26059: a blind SQL injection in GetQueryData allows an attacker to inject arbitrary SQL, retrieve/modify database contents, and execute system commands in all versions prior to 1.8.02.004 (per initial description) and up to at least 1.9 per ICS...

Delta Electronics DIAEnergie 代码问题漏洞

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A code issue...

Delta Electronics DIAEnergie SQL Injection Vulnerability (CNVD-2022-27550)

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A SQL injection...

CVE-2022-0988

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product...

CVE-2022-0988

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product...

CVE-2021-44768

Delta Electronics CNCSoft Version 1.01.30 and prior is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information...

CVE-2021-44768

Delta Electronics CNCSoft Version 1.01.30 and prior is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information...

Default credentials

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product...

CVE-2021-44768 Delta Electronics CNCSoft Out-of-bounds Read

Delta Electronics CNCSoft Version 1.01.30 and prior is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information...

CVE-2021-44768 Delta Electronics CNCSoft Out-of-bounds Read

Delta Electronics CNCSoft Version 1.01.30 and prior is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information...

CVE-2021-44768

CVE-2021-44768 affects Delta Electronics CNCSoft (Versions 1.01.30 and prior). The vulnerability is an out-of-bounds read while processing a specific project file, which may allow information disclosure. The issue is not exploitable remotely according to the ICS advisory. Affected users are advis...

CVE-2022-0988

Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission because the web app runs by default on HTTP. An attacker could remotely read transmitted client–product data. Public sources (NVD, CVE-2022-0988) indicate a cleartext exposure with a CVSS v3 base score ...

CVE-2022-0988 Delta Electronics DIAEnergie CLEARTEXT Transmission of Sensitive Information

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product...