ZDI-CAN-18857: ZDI-23-1529: Delta Electronics DIAEnergie HandlerUploadCarbon Use Of Hard-Coded Credentials Authentication Bypass Vulnerability

Published Oct 5, 2023

Updated

This vulnerability allows remote attackers to bypass authentication on affected installations of Delta Electronics DIAEnergie. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2022-3214.

Affected Software

1 affected component

Delta Electronics DIAEnergie

Event History

Oct 5, 2023

Advisory Published

05:00 AM

Data Sourced

05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-18857?

The severity of ZDI-CAN-18857 is rated at 9.8 on the CVSS scale, indicating a critical vulnerability.

How do I fix ZDI-CAN-18857?

To fix ZDI-CAN-18857, ensure that your Delta Electronics DIAEnergie installations are updated to the latest patched version available from the vendor.

What type of vulnerability is ZDI-CAN-18857?

ZDI-CAN-18857 is an authentication bypass vulnerability that allows remote attackers to exploit the affected system without authentication.

Which software versions are affected by ZDI-CAN-18857?

ZDI-CAN-18857 affects installations of Delta Electronics DIAEnergie, but specific version information is not provided in the alert.

Can ZDI-CAN-18857 be exploited remotely?

Yes, ZDI-CAN-18857 can be exploited remotely without the need for authentication.