ZDI-23-1530: Delta Electronics DIAEnergie HandlerUploadTag Use Of Hard-Coded Credentials Authentication Bypass Vulnerability
Published Oct 5, 2023
·Updated
This vulnerability allows remote attackers to bypass authentication on affected installations of Delta Electronics DIAEnergie. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2022-3214.
Affected Software
1 affected component
Delta Electronics DIAEnergie
Event History
Oct 5, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-23-1530?
ZDI-23-1530 has a CVSS rating of 9.8, indicating it is a critical vulnerability.
2
How do I fix ZDI-23-1530?
To address ZDI-23-1530, ensure you apply the latest security updates provided by Delta Electronics for DIAEnergie.
3
Who is affected by ZDI-23-1530?
Users of Delta Electronics DIAEnergie installations are at risk from ZDI-23-1530.
4
Can ZDI-23-1530 be exploited remotely?
Yes, ZDI-23-1530 allows remote attackers to bypass authentication without needing any authentication themselves.
5
What type of vulnerability is ZDI-23-1530?
ZDI-23-1530 is identified as an authentication bypass vulnerability.