CVE-2022-0988 — Delta Electronics DIAEnergie CLEARTEXT Transmission of Sensitive Information

CVE-2022-0988

Delta Electronics DIAEnergie CLEARTEXT Transmission of Sensitive Information PUBLISHED

Description (CNA)

Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product.

Affected (CNA)

Vendor / product	Versions
Delta Electronics / DIAEnergie	affected unspecified through 1.7.5

CWE

CWE-319

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-03

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-03

CISA-ADP

No English description supplied.

No references supplied.