CVE-2022-3214

9.8CRITICAL

Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to  1.9.03.009 have this vulnerability. Exec

公開日: 9/16/2022更新日: 11/21/2024
NVDで表示MITREで表示

説明

Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to  1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing remote code execution.

AI分析AIによる分析

影響を受ける製品

deltawwdiaenergie

参照