CVE-2024-23494: Delta Electronics DIAEnergie SQL injection
Published Mar 21, 2024
·Updated
SQL injection vulnerability exists in GetDIAEunListParameters.
Affected Software
2 affected components
Delta Electronics DIAEnergie
Deltaww Diaenergie<1.10.00.005
Remediation
Information
Delta recommends users update to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents https://www.deltaww.com/en/customerService .
Event History
Mar 21, 2024
CVE Published
via MITRE·10:16 PM
Data Sourced
via MITRE·10:16 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-23494?
CVE-2024-23494 is classified as a medium severity vulnerability due to its potential to allow SQL injection.
2
How do I fix CVE-2024-23494?
To fix CVE-2024-23494, ensure to validate and sanitize all inputs in the GetDIAE_unListParameters function.
3
What software is affected by CVE-2024-23494?
CVE-2024-23494 affects Delta Electronics DIAEnergie software.
4
What type of vulnerability is CVE-2024-23494?
CVE-2024-23494 is an SQL injection vulnerability that can compromise the security of the application.
5
Can CVE-2024-23494 be exploited remotely?
Yes, CVE-2024-23494 can potentially be exploited remotely by attackers to execute unauthorized SQL queries.