CVE-2024-42417

Description

Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script Handler_CFG.ashx. An authenticated attacker may be able to exploit this issue to cause delay in the targeted product.

Affected Platforms

Weakness Type

CWE-89

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-277-03
• https://www.deltaww.com/en-US/Cybersecurity_Advisory