CVE-2021-44544: Delta Electronics DIAEnergie (Update A)
First published: Wed Dec 22 2021(Updated: )
DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”.
Credit: ics-cert@hq.dhs.gov ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Deltaww Diaenergie | <=1.7.5 | |
| Delta Electronics DIAEnergie | <1.9 | 1.9 |
| <=1.7.5 |
Remedy
Delta Electronics has released an updated version of DIAEnergie and recommends users install v1.8.0 and later on all affected systems.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for the DIAEnergie vulnerability?
The vulnerability ID for the DIAEnergie vulnerability is CVE-2021-44544.
What is the affected software for the DIAEnergie vulnerability?
The affected software for the DIAEnergie vulnerability is DIAEnergie Version 1.7.5 and prior.
What is the severity level of the DIAEnergie vulnerability?
The severity level of the DIAEnergie vulnerability is high with a value of 6.1.
How does the DIAEnergie vulnerability occur?
The DIAEnergie vulnerability occurs when arbitrary code is injected into the parameter 'name' of the script 'HandlerEnergyType.ashx', resulting in multiple cross-site scripting vulnerabilities.
Are there any references available for the DIAEnergie vulnerability?
Yes, you can find more information about the DIAEnergie vulnerability at the following reference: https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-03
- collector/nvd-index
- agent/type
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/weakness
- agent/references
- agent/description
- agent/severity
- agent/title
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/author
- agent/tags
- agent/softwarecombine
- agent/event
- agent/trending
- vendor/deltaww
- canonical/deltaww diaenergie
- version/deltaww diaenergie/1.7.5
- vendor/delta electronics
- canonical/delta electronics diaenergie