CVE-2022-43452 — Delta Electronics DIAEnergie SQL Injection

CVE-2022-43452

Delta Electronics DIAEnergie SQL Injection PUBLISHED

Description (CNA)

SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

Affected (CNA)

Vendor / product	Versions
Delta Electronics / DIAEnergie	affected All

CWE

CWE-89

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06

CISA-ADP

No English description supplied.

No references supplied.