Описание
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the DIAEnergie application, which may allow an attacker to plant new files (such as DLLs) or replace existing executable files.
Ссылки
- MitigationThird Party AdvisoryUS Government Resource
- MitigationThird Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 1.8.02.004 (исключая)
cpe:2.3:a:deltaww:diaenergie:*:*:*:*:*:*:*:*
EPSS
Процентиль: 13%
0.00043
Низкий
7.8 High
CVSS3
4.6 Medium
CVSS2
Дефекты
CWE-276
CWE-276
Связанные уязвимости
CVSS3: 7.8
github
почти 4 года назад
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the DIAEnergie application, which may allow an attacker to plant new files (such as DLLs) or replace existing executable files.
EPSS
Процентиль: 13%
0.00043
Низкий
7.8 High
CVSS3
4.6 Medium
CVSS2
Дефекты
CWE-276
CWE-276