CVE-2024-23975: Delta Electronics DIAEnergie SQL injection
Published Mar 21, 2024
·Updated
SQL injection vulnerability exists in GetDIAEslogListParameters.
Affected Software
2 affected components
Delta Electronics DIAEnergie
Deltaww Diaenergie<1.10.00.005
Remediation
Information
Delta recommends users update to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents https://www.deltaww.com/en/customerService .
Event History
Mar 21, 2024
CVE Published
via MITRE·10:15 PM
Data Sourced
via MITRE·10:15 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-23975?
CVE-2024-23975 is classified as a high-severity SQL injection vulnerability.
2
How do I fix CVE-2024-23975?
To fix CVE-2024-23975, ensure that input parameters are properly sanitized and validated before processing.
3
Which software is affected by CVE-2024-23975?
CVE-2024-23975 affects Delta Electronics DIAEnergie software.
4
What type of vulnerability is CVE-2024-23975?
CVE-2024-23975 is an SQL injection vulnerability.
5
Can CVE-2024-23975 lead to data compromise?
Yes, CVE-2024-23975 can potentially lead to unauthorized data access and compromise.