CVE-2024-25574: Delta Electronics DIAEnergie SQL Injection
Published Apr 1, 2024
·Updated
SQL injection vulnerability exists in GetDIAEusListParameters.
Affected Software
2 affected components
Delta Electronics DIAEnergie
Deltaww Diaenergie<1.10.00.005
Remediation
Information
Delta recommends users update to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents https://www.deltaww.com/en/customerService .
Event History
Apr 1, 2024
CVE Published
via MITRE·04:04 PM
Data Sourced
via MITRE·04:04 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-25574?
CVE-2024-25574 has been classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2024-25574?
To remediate CVE-2024-25574, ensure that input validation and parameterized queries are implemented in the affected application.
3
Which software is affected by CVE-2024-25574?
CVE-2024-25574 affects Delta Electronics DIAEnergie software.
4
What type of vulnerability is CVE-2024-25574?
CVE-2024-25574 is an SQL injection vulnerability.
5
Can CVE-2024-25574 be exploited remotely?
Yes, CVE-2024-25574 can potentially be exploited remotely by an attacker.