CVE-2021-44544: Delta Electronics DIAEnergie (Update A)

Q: What is the vulnerability ID for the DIAEnergie vulnerability?

The vulnerability ID for the DIAEnergie vulnerability is CVE-2021-44544.

Q: What is the affected software for the DIAEnergie vulnerability?

The affected software for the DIAEnergie vulnerability is DIAEnergie Version 1.7.5 and prior.

Q: What is the severity level of the DIAEnergie vulnerability?

The severity level of the DIAEnergie vulnerability is high with a value of 6.1.

Q: How does the DIAEnergie vulnerability occur?

The DIAEnergie vulnerability occurs when arbitrary code is injected into the parameter 'name' of the script 'HandlerEnergyType.ashx', resulting in multiple cross-site scripting vulnerabilities.

Q: Are there any references available for the DIAEnergie vulnerability?

Yes, you can find more information about the DIAEnergie vulnerability at the following reference: https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-03

Published Dec 22, 2021

Updated

DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”.

Affected Software

2 affected componentsFixes available

Delta Electronics DIAEnergie<1.9

1.9

Deltaww Diaenergie<=1.7.5

Remediation

Information

Delta Electronics has released an updated version of DIAEnergie and recommends users install v1.8.0 and later on all affected systems.

Event History

Dec 22, 2021

CVE Published

via MITRE·06:06 PM

Data Sourced

via MITRE·06:06 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

ICSA-21-238-03

Frequently Asked Questions

What is the vulnerability ID for the DIAEnergie vulnerability?