CVE-2022-41702

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the InsertReg API.

Score

CVSS 3.1 8.7 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-10-27

Last modified

2025-04-16

Weaknesses

CWE-79

Affected products

• Diaenergie (Delta Electronics)
• Diaenergie (Deltaww)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06