CVE-2022-41775

SQL Injection in Handler_CFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

Score

CVSS 3.1 8.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-11-17

Last modified

2025-04-16

Weaknesses

CWE-89

Affected products

• Diaenergie (Delta Electronics)
• Diaenergie (Deltaww)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06