CoreCVE
Back

CRITICAL

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_rltHandler.ashx

Published May 2, 2022

Description

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_rltHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

Affected products

Remediation

Vendor solution

Delta Electronics has fixed the reported vulnerabilities in Version 1.08.02.004. Users should contact Delta customer service or a Delta representative for this release, as it will not be released publicly. Delta is working on a public release that will include these fixes and other features on June 30, 2022.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner icscert
Published May 2, 2022
Updated Apr 16, 2025
Reserved Apr 14, 2022
Link CVE-2022-1377

CISA Vulnrichment

Updated Apr 16, 2025

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-1377

Red Hat

No data

ENISA EUVD

Assigner icscert
Published May 2, 2022
Updated Apr 16, 2025
Link EUVD-2022-24697

GitHub

No data