CVE-2024-34032: SQL Injection in Delta Electronics DIAEnergie
First published: Fri May 03 2024(Updated: )
Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the GetDIACloudList endpoint. An authenticated attacker can exploit this issue to potentially compromise the system on which DIAEnergie is deployed.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| DIAEnergie | ||
| DIAEnergie | =1.10.00.005 |
Remedy
Delta Electronics recommends users update to DIAEnergie v1.10.01.004 to mitigate these vulnerabilities. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-34032?
CVE-2024-34032 has a high severity rating due to the potential for SQL injection exploitation.
How do I fix CVE-2024-34032?
To fix CVE-2024-34032, update Delta Electronics DIAEnergie to the latest version that addresses this SQL injection vulnerability.
What type of vulnerability is CVE-2024-34032?
CVE-2024-34032 is an SQL injection vulnerability that can be exploited by authenticated attackers.
What systems are affected by CVE-2024-34032?
CVE-2024-34032 affects Delta Electronics DIAEnergie, specifically version 1.10.00.005.
Who is responsible for addressing CVE-2024-34032?
It is the responsibility of Delta Electronics to provide patches and updates to mitigate CVE-2024-34032.
- agent/weakness
- agent/remedy
- agent/title
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/severity
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/last-modified-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/event
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- vendor/delta electronics
- canonical/diaenergie
- vendor/deltaww
- version/diaenergie/1.10.00.005