What’s Vulnerable › Vulnerabilities

CVE-2024-34032: SQL Injection in Delta Electronics DIAEnergie

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 8.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-03 · updated 2026-06-17
• Weakness: CWE-89

Description

Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the GetDIACloudList endpoint. An authenticated attacker can exploit this issue to potentially compromise the system on which DIAEnergie is deployed.

Affected products

• Delta Electronics DIAEnergie: 1.10.00.005

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-02
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-02

Get alerted when CVE-2024-34032 or the next vulnerability affects your stack