Security Advisory

CVE-2022-3214

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-09-16 18:05:41
Last updated 2024-08-03 01:00:10
Assigner icscert
State PUBLISHED

Description

Delta Industrial Automations DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to  1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing remote code execution.