Lucene search
IcscertCVELIST:CVE-2022-26514HistoryMar 29, 2022 - 4:37 p.m.
CVE-2022-26514 Delta Electronics DIAEnergie SQL Injection in DIAE_tagHandler.ashx
2022-03-2916:37:12
CWE-89
icscert
www.cve.org
3
delta electronics
diaenergie
sql injection
diae_taghandler.ashx
vulnerability
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
49.3%
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_tagHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.
CNA Affected
[
{
"product": "DIAEnergie",
"vendor": "Delta Electronics",
"versions": [
{
"lessThan": "1.8.02.004",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2022-26514
2022-03-29 17:15:15
prion
prion
Sql injection
2022-03-29 17:15:00
nvd
nvd
CVE-2022-26514
2022-03-29 17:15:15
ics
ics
Delta Electronics DIAEnergie (Update C)
2022-08-02 12:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
49.3%
Related for CVELIST:CVE-2022-26514