CVE-2021-44544 — Delta Electronics DIAEnergie (Update A)

CVE-2021-44544

Delta Electronics DIAEnergie (Update A) PUBLISHED

Description (CNA)

DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”.

Affected (CNA)

Vendor / product	Versions
Delta Electronics / DIAEnergie	affected All through 1.7.5

CWE

CWE-79

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-03

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-03