CVE-2022-43774: SQL Injection
First published: Wed Oct 26 2022(Updated: )
The HandlerPageP_KID class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote system.
Credit: vulnreport@tenable.com vulnreport@tenable.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Deltaww Diaenergie | =1.9.0 | |
| =1.9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this flaw?
The vulnerability ID of this flaw is CVE-2022-43774.
What is the affected software and version?
The affected software is Delta Electronics DIAEnergy v1.9.
What is the severity of CVE-2022-43774?
The severity of CVE-2022-43774 is critical with a CVSS score of 9.8.
What is the CWE ID of this vulnerability?
The CWE ID of this vulnerability is CWE-89.
Is there a fix available for CVE-2022-43774?
Yes, it is recommended to update to a fixed version provided by the software vendor.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/deltaww
- canonical/deltaww diaenergie
- version/deltaww diaenergie/1.9.0