by Kastro
Paper/Archive/CVE-2022-25347

CVE-2022-25347

Delta Electronics DIAEnergie — Delta Electronics DIAEnergie Path Traversal

EPSS 11%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 96.0.960 × 2019.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files to locations on the file system.

Affected

ProductAffectedFixed inSource
DIAEnergieunspecified – < 1.8.02.0041.8.02.004CNA

Scores by source

icscert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/uscert/ics/advisories/icsa-22-081-01