Delta Electronics DIAEnergie ReadRegIND SQL Injection Vulnerability (CNVD-2022-36021)

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.Delta Electronics DIAEnergie is vulnerable to a SQL injection vulnerability that stems from ReadRegIND’s lack of validation of externally entered SQL statements. An attacker can inject arbitrary SQL queries, retrieve and modify database content, and execute system commands.