CVE-2024-28029 — Client-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie

CVE-2024-28029

Client-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie PUBLISHED

Description (CNA)

Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality.

Affected (CNA)

Vendor / product	Versions
Delta Electronics / DIAEnergie	affected 0 before v1.10.00.005

CWE

CWE-602

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-12

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-12

CISA-ADP

No English description supplied.

No references supplied.