Beveiligingsadvies

CVE-2022-41133

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-10-27 20:15:38
Laatst bijgewerkt 2025-04-16 17:44:56
Toegewezen door icscert
CVSS-score 8.8
Status PUBLISHED

Beschrijving

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingsListParameters. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.