← CVE Intelligence

CVE-2022-3214

Delta Electronics DIAEnergy Use of Hard-coded Credentials PUBLISHED

Description (CNA)

Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to  1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing remote code execution.

Affected (CNA)

Vendor / productVersions
Delta Electronics / DIAEnergyaffected all before 1.9.03.009

CWE

CWE-798

References

ADP enrichment

CVE

No English description supplied.