CVE-2024-25567
Assigner: icscert
Published: 2024-03-21T22:22:17.780Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: DIAEnergie
vendor: Delta Electronics
versions: lessThan: v1.10.00.005
status: affected
version: 0
versionType: custom
credits: type: finder
value: Michael Heinzl reported these vulnerabilities to CISA.
datePublic: 2024-03-14T17:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten.</span>


value: 
Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten.


metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-22
description: CWE-22: Improper limitation of a pathname to a restricted directory ('Path traversal')
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">Delta recommends users update to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from </span><a target="_blank" rel="nofollow" href="https://www.deltaww.com/en/customerService">Delta Electronics' regional sales or agents</a><span style="background-color: rgb(255, 255, 255);">.</span>

<br>
value: 
Delta recommends users update to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from  Delta Electronics' regional sales or agents https://www.deltaww.com/en/customerService .


source: advisory: ICSA-24-074-12
discovery: EXTERNAL
title: Delta Electronics DIAEnergie Path traversal
x_generator: engine: Vulnogram 0.1.0-dev