high8.8
CVE-2024-42417
Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script Handler_CFG.ashx.
Impact
Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script Handler_CFG.ashx. An authenticated attacker may be able to exploit this issue to cause delay in the targeted product.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deltaww | Diaenergie | through 1.10.01.008 |