CVE-2022-43506 Delta Electronics DIAEnergie SQL Injection

SQL Injection in HandlerTagKID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-41775 Delta Electronics DIAEnergie SQL Injection

SQL Injection in HandlerCFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43506

Delta Electronics DIAEnergie is affected by CVE-2022-43506, a SQL injection vulnerability in the HandlerTag_KID.ashx component affecting DIAEnergie versions prior to v1.9.02.001. The root cause is improper input handling that allows an attacker to inject arbitrary SQL via the network, potentially...

CVE-2022-41775

Delta Electronics DIAEnergie is affected by a SQL injection in Handler_CFG.ashx for versions prior to v1.9.02.001. The vulnerability (CVE-2022-41775) allows network-based SQL queries with low attack complexity and low privileges, potentially impacting confidentiality, integrity, and availability ...

CVE-2022-43452

Delta Electronics DIAEnerg ie vulnerable to SQL injection in FtyInfoSetting.aspx for DIAEnergie before v1.9.02.001. The issue arises from improper handling of input in the web app, enabling an attacker with network access and low privileges to inject arbitrary SQL queries, potentially compromisin...

CVE-2022-43452 Delta Electronics DIAEnergie SQL Injection

SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-41775 Delta Electronics DIAEnergie SQL Injection

SQL Injection in HandlerCFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43447 Delta Electronics DIAEnergie SQL Injection

SQL Injection in AMEBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43447 Delta Electronics DIAEnergie SQL Injection

SQL Injection in AMEBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43457 Delta Electronics DIAEnergie SQL Injection

SQL Injection in HandlerPageKID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43447

Summary: CVE-2022-43447 is a SQL injection vulnerability in Delta Electronics DIAEnergie. The issue affects DIAEnergie versions prior to v1.9.02.001 (and earlier pre–1.9.01.002, 1.9.02.001, 1.9.03.001 as per ICS updates) that process requests via web components, notably the AM_EBillAnalysis.aspx ...

CVE-2022-43457 Delta Electronics DIAEnergie SQL Injection

SQL Injection in HandlerPageKID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43457

CVE-2022-43457 is a SQL injection vulnerability in Delta Electronics DIAEnergie, specifically in HandlerPage_KID.ashx. Affected versions are prior to v1.9.02.001 (and referenced variants in update notes suggest gaps up to v1.9.03.001). Exploitation appears to be network-based with low attack comp...

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics Taiwan, China used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes and maximize...

PT-2022-26951 · Delta Electronics · Delta Electronics Diaenergie

Name of the Vulnerable Software and Affected Versions: Delta Electronics DIAEnergie versions prior to v1.9.02.001 Description: The issue allows an attacker to inject SQL queries via the network. This is related to SQL Injection in HandlerTag KID.ashx. Recommendations: For versions prior to...

PT-2022-26925 · Delta Electronics · Diaenergie

Name of the Vulnerable Software and Affected Versions: Delta Electronics DIAEnergie versions prior to v1.9.02.001 Description: The issue allows an attacker to inject SQL queries via Network in FtyInfoSetting.aspx. Recommendations: For versions prior to v1.9.02.001, update to version v1.9.02.001 o...

Mitsubishi (CVE-2022-33322)

Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator...

CVE-2022-33239

Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

CVE-2022-33237

Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

Code injection

Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...