CVE-2022-41133

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingsListParameters. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

Score

CVSS 3.1 8.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-10-27

Last modified

2025-04-16

Weaknesses

CWE-89

Affected products

• Diaenergie (Delta Electronics)
• Diaenergie (Deltaww)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06