CVE-2024-34033: Path Traversal vulnerability in Delta Electronics DIAEnergie

Published May 3, 2024

Updated

Delta Electronics DIAEnergie has insufficient input validation which makes it possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten.

Affected Software

2 affected components

Delta Electronics DIAEnergie

Deltaww Diaenergie=1.10.00.005

Remediation

Information

Delta Electronics recommends users update to DIAEnergie v1.10.01.004 to mitigate these vulnerabilities. Users can request this version of DIAEnergie from Delta Electronics' regional sales or agents.

Event History

May 3, 2024

CVE Published

via MITRE·12:20 AM

Data Sourced

via MITRE·12:20 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-34033?

CVE-2024-34033 has a high severity rating due to its potential for path traversal attacks and data overwriting.

How do I fix CVE-2024-34033?

To fix CVE-2024-34033, update Delta Electronics DIAEnergie to the latest version that addresses the input validation issue.

What type of vulnerability is CVE-2024-34033?

CVE-2024-34033 is a path traversal vulnerability that allows unauthorized file access and modification.

Who is affected by CVE-2024-34033?

Users of Delta Electronics DIAEnergie, specifically version 1.10.00.005, are affected by CVE-2024-34033.

What can an attacker do with CVE-2024-34033?

An attacker can exploit CVE-2024-34033 to overwrite files on the system by manipulating file paths.