CVE-2021-44544

DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”.

Score

CVSS 3.1 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2021-12-22

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Diaenergie (Delta Electronics)
• Diaenergie (Deltaww)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-03