Deltaww Diaenergie
82 CVEs affecting Deltaww Diaenergie. Latest disclosed: 2025-08-18. Critical: 39, High: 34.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-43699 | Critical | 9.8 | 2024-10-03 | Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script AM_RegReport.aspx. An unauthenticated attacker may be able to exploit this issue t… |
CVE-2024-4548 | Critical | 9.8 | 2024-05-06 | An SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'RecalculateHDMWYC' message, which is split into… |
CVE-2024-4547 | Critical | 9.8 | 2024-05-06 | A SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'RecalculateScript' message, which is splitted int… |
CVE-2022-43775 | Critical | 9.8 | 2022-10-26 | The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system. |
CVE-2022-43774 | Critical | 9.8 | 2022-10-26 | The HandlerPageP_KID class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote sy… |
CVE-2022-3214 | Critical | 9.8 | 2022-09-16 | Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to 1… |
CVE-2022-1378 | Critical | 9.8 | 2022-05-02 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx. This allows an attacker… |
CVE-2022-1377 | Critical | 9.8 | 2022-05-02 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_rltHandler.ashx. This allows an attacker… |
CVE-2022-1376 | Critical | 9.8 | 2022-05-02 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_privgrpHandler.ashx. This allows an atta… |
CVE-2022-1375 | Critical | 9.8 | 2022-05-02 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_slogHandler.ashx. This allows an attacke… |
CVE-2022-1374 | Critical | 9.8 | 2022-05-02 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_unHandler.ashx. This allows an attacker… |
CVE-2022-1372 | Critical | 9.8 | 2022-05-02 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in dlSlog.aspx. This allows an attacker to injec… |
CVE-2022-1371 | Critical | 9.8 | 2022-05-02 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegf. This allows an attacker to inject a… |
CVE-2022-1370 | Critical | 9.8 | 2022-05-02 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadREGbyID. This allows an attacker to injec… |
CVE-2022-1369 | Critical | 9.8 | 2022-05-02 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegIND. This allows an attacker to inject… |
CVE-2022-1367 | Critical | 9.8 | 2022-05-02 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx. This allows an attacker to… |
CVE-2022-1366 | Critical | 9.8 | 2022-05-02 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx. This allows an attacker to… |
CVE-2022-27175 | Critical | 9.8 | 2022-03-29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetCalcTagList. This allows an attacker… |
CVE-2022-26887 | Critical | 9.8 | 2022-03-29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_loopmapHandler.ashx. This allows an atta… |
CVE-2022-26836 | Critical | 9.8 | 2022-03-29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Calendar. This allows… |