critical9.8
CVE-2024-43699
Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script AM_RegReport.aspx.
Impact
Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script AM_RegReport.aspx. An unauthenticated attacker may be able to exploit this issue to obtain records contained in the targeted product.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deltaww | Diaenergie | through 1.10.01.008 |