PT-2022-17646

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is a blind SQL injection vulnerability existing in the GetQueryData function. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database...

CVE-2022-26059: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-26514: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in DIAEtagHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

PT-2022-18092

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is related to an incorrect default permission in the DIAEnergie application. This may allow an attacker to plant new files, such as DLLs, or replace existing...

Delta Electronics DIAEnergie SQL Injection Vulnerability (CNVD-2022-27550)

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A SQL injection...

CVE-2022-0988

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product...

CVE-2022-0988

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product...

CVE-2021-44768

Delta Electronics CNCSoft Version 1.01.30 and prior is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information...

CVE-2021-44768

Delta Electronics CNCSoft Version 1.01.30 and prior is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information...

Default credentials

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product...

CVE-2021-44768 Delta Electronics CNCSoft Out-of-bounds Read

Delta Electronics CNCSoft Version 1.01.30 and prior is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information...

CVE-2021-44768 Delta Electronics CNCSoft Out-of-bounds Read

Delta Electronics CNCSoft Version 1.01.30 and prior is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information...

CVE-2021-44768

CVE-2021-44768 affects Delta Electronics CNCSoft (Versions 1.01.30 and prior). The vulnerability is an out-of-bounds read while processing a specific project file, which may allow information disclosure. The issue is not exploitable remotely according to the ICS advisory. Affected users are advis...

CVE-2022-0988 Delta Electronics DIAEnergie CLEARTEXT Transmission of Sensitive Information

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product...

CVE-2022-0988 Delta Electronics DIAEnergie CLEARTEXT Transmission of Sensitive Information

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product...

CVE-2022-0988

Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission because the web app runs by default on HTTP. An attacker could remotely read transmitted client–product data. Public sources (NVD, CVE-2022-0988) indicate a cleartext exposure with a CVSS v3 base score ...

PT-2022-12227

Name of the Vulnerable Software and Affected Versions Delta Electronics CNCSoft versions 1.01.30 and prior Description The issue allows an attacker to disclose information due to an out-of-bounds read while processing a specific project file. Recommendations For Delta Electronics CNCSoft versions...

CVE-2022-0988: Cleartext Transmission of Sensitive Information

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product...

PT-2022-13573

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions 1.7.5 and prior Description The issue concerns cleartext transmission because the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the...

CVE-2021-44768: Out-of-bounds Read

Delta Electronics CNCSoft Version 1.01.30 and prior is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information...