Threat Encyclopedia



This indicates an attack attempt to exploit an SQL Injection Vulnerability in Delta Electronics DIAEnergie.
The vulnerability is due to insufficient input validation when processing requests to the GetDIAE_line_message_settingsListParameters endpoint. A remote attacker can exploit this vulnerability by sending a specially crafted request. Successful exploitation could result in the execution of arbitrary code on the target system within the context of NT SERVICE\MSSQLSERVER.

affected-products-logoAffected Products

Delta Electronics DIAEnergie prior to

Impact logoImpact

System Compromise: Remote attackers can add, view, delete or modify data in the database of the affected application

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor.

CVE References


Telemetry logoTelemetry