Количество 3
Количество 3
CVE-2022-3214
Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to 1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing remote code execution.
GHSA-jffp-ghx6-2288
Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Version 1.8.0 and prior have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing remote code execution.
BDU:2023-03081
Уязвимость промышленной системы управления энергопотреблением DIAEnergie, связанная с использованием предустановленных учетных данных, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2022-3214 Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to 1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing remote code execution. | CVSS3: 9.8 | 4% Низкий | больше 3 лет назад | |
GHSA-jffp-ghx6-2288 Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Version 1.8.0 and prior have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing remote code execution. | CVSS3: 9.8 | 4% Низкий | больше 3 лет назад | |
BDU:2023-03081 Уязвимость промышленной системы управления энергопотреблением DIAEnergie, связанная с использованием предустановленных учетных данных, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 4% Низкий | больше 2 лет назад |
Уязвимостей на страницу