CVE-2024-28040: Delta Electronics DIAEnergie SQL injection
Published Mar 21, 2024
·Updated
SQL injection vulnerability exists in GetDIAEastListParameters.
Affected Software
2 affected components
Delta Electronics DIAEnergie
Deltaww Diaenergie<1.10.00.005
Remediation
Information
Delta recommends users update to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents https://www.deltaww.com/en/customerService .
Event History
Mar 21, 2024
CVE Published
via MITRE·10:13 PM
Data Sourced
via MITRE·10:13 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-28040?
CVE-2024-28040 is classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2024-28040?
To fix CVE-2024-28040, ensure that proper input validation and parameterized queries are implemented in the affected functions.
3
Which software is affected by CVE-2024-28040?
CVE-2024-28040 affects Delta Electronics DIAEnergie software.
4
What kind of vulnerability is CVE-2024-28040?
CVE-2024-28040 is an SQL injection vulnerability that can allow attackers to execute arbitrary SQL queries.
5
Can CVE-2024-28040 lead to data exposure?
Yes, CVE-2024-28040 can potentially lead to unauthorized access to sensitive data due to SQL injection.