CVE-2022-41555: Delta Electronics DIAEnergie
First published: Thu Oct 27 2022(Updated: )
The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutLineMessageSetting API.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Deltaww Diaenergie | <1.9.01.002 | |
| Delta Electronics DIAEnergie versions prior to v1.9.01.002 | ||
| Delta Electronics DIAEnergie versions prior to v1.9.02.001 |
Remedy
Delta did not publicly release v1.9.01.002. Users are encouraged to contact Delta front-end sales or agents to get this updated version.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-41555.
What is the severity of CVE-2022-41555?
The severity of CVE-2022-41555 is high with a CVSS score of 5.4.
What is the affected product and its version?
The affected product is DIAEnergie and the vulnerable versions are prior to v1.9.01.002.
What type of vulnerability is CVE-2022-41555?
CVE-2022-41555 is a stored cross-site scripting vulnerability.
Is there a fix available for CVE-2022-41555?
Yes, upgrading to version v1.9.01.002 or later of DIAEnergie fixes the vulnerability.
- collector/nvd-index
- agent/type
- agent/references
- agent/weakness
- agent/author
- agent/description
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/severity
- agent/remedy
- agent/title
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/trending
- vendor/deltaww
- canonical/deltaww diaenergie
- vendor/delta electronics
- canonical/delta electronics diaenergie versions prior to v1.9.01.002
- canonical/delta electronics diaenergie versions prior to v1.9.02.001