← CVE Intelligence

CVE-2022-1377

Delta Electronics / DIAEnergie PUBLISHED

Description (CNA)

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_rltHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

Affected (CNA)

Vendor / productVersions
Delta Electronics / DIAEnergieaffected unspecified before 1.8.02.004

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.