Delta Electronics DIAEnergie SQL Injection Vulnerability (CNVD-2022-27550)

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A SQL injection vulnerability exists in Delta Electronics DIAEnergie that A SQL blind injection vulnerability exists in HandlerDialog_KID.ashx. The vulnerability can be exploited to inject arbitrary SQL queries, retrieve and modify database content, and execute system commands.