CVE-2024-34032: SQL Injection in Delta Electronics DIAEnergie

Published May 3, 2024

Updated

Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the GetDIACloudList endpoint. An authenticated attacker can exploit this issue to potentially compromise the system on which DIAEnergie is deployed.

Affected Software

2 affected components

Delta Electronics DIAEnergie

Deltaww Diaenergie=1.10.00.005

Remediation

Information

Delta Electronics recommends users update to DIAEnergie v1.10.01.004 to mitigate these vulnerabilities. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.

Event History

May 3, 2024

CVE Published

via MITRE·12:16 AM

Data Sourced

via MITRE·12:16 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-34032?

CVE-2024-34032 has a high severity rating due to the potential for SQL injection exploitation.

How do I fix CVE-2024-34032?

To fix CVE-2024-34032, update Delta Electronics DIAEnergie to the latest version that addresses this SQL injection vulnerability.

What type of vulnerability is CVE-2024-34032?

CVE-2024-34032 is an SQL injection vulnerability that can be exploited by authenticated attackers.

What systems are affected by CVE-2024-34032?

CVE-2024-34032 affects Delta Electronics DIAEnergie, specifically version 1.10.00.005.

Who is responsible for addressing CVE-2024-34032?

It is the responsibility of Delta Electronics to provide patches and updates to mitigate CVE-2024-34032.