ZDI-CAN-18855: ZDI-23-1531: Delta Electronics DIAEnergie HandlerUploadCalendar Use Of Hard-Coded Credentials Authentication Bypass Vulnerability

Published Oct 5, 2023

Updated

This vulnerability allows remote attackers to bypass authentication on affected installations of Delta Electronics DIAEnergie. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2022-3214.

Affected Software

1 affected component

Delta Electronics DIAEnergie

Event History

Oct 5, 2023

Advisory Published

05:00 AM

Data Sourced

05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-18855?

The severity of ZDI-CAN-18855 is rated at 9.8 on the CVSS scale, indicating a critical vulnerability.

How do I fix ZDI-CAN-18855?

To fix ZDI-CAN-18855, you should apply the latest security patches provided by Delta Electronics for the DIAEnergie software.

What type of attacks can exploit ZDI-CAN-18855?

ZDI-CAN-18855 can be exploited by remote attackers to bypass authentication without needing any valid credentials.

Which software is affected by ZDI-CAN-18855?

The affected software for ZDI-CAN-18855 is Delta Electronics DIAEnergie.

Is authentication required to exploit ZDI-CAN-18855?

No, authentication is not required to exploit ZDI-CAN-18855.