CVE-2024-4547: Delta Electronics DIAEnergie Unauthenticated SQL Injection
A SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'RecalculateScript' message, which is splitted into 4 fields using the '~' character as the separator. An unauthenticated remote attacker can perform SQLi via the fourth field
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4547?
CVE-2024-4547 has been rated as a high severity vulnerability due to the potential for unauthenticated remote SQL injection.
How do I fix CVE-2024-4547?
To fix CVE-2024-4547, update Delta Electronics DIAEnergie to version 1.10.1.8611 or later as it includes the necessary patches.
What type of attack is associated with CVE-2024-4547?
CVE-2024-4547 is associated with SQL injection attacks that can be executed remotely.
What versions of Delta Electronics DIAEnergie are affected by CVE-2024-4547?
CVE-2024-4547 affects Delta Electronics DIAEnergie versions 1.10.1.8610 and prior.
Can CVE-2024-4547 be exploited without authentication?
Yes, CVE-2024-4547 can be exploited by unauthenticated remote attackers.