CVE-2024-4549 HIGH

CVE-2024-4549: Delta Electronics DIAEnergie SQL Injection

Vendor Delta Electronics
Product DIAEnergie
Published May 6, 2024
Last update August 1, 2024
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A denial of service vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior. When processing an 'ICS Restart!' message, CEBC.exe restarts the system.

Key dates

02Disclosure timeline

May 6, 2024 CVE published
August 1, 2024 Record updated