CVE-2021-32967

9.8 criticalEPSS 1.4%

Critical (9.8) in deltaww diaenergie. EPSS 1.4% chance of exploitation in the next 30 days.

Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to add a new administrative user without being authenticated or authorized, which may allow the attacker to log in and use the device with administrative privileges.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWEs: CWE-287, CWE-288
Published: 2021-08-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

deltaww:diaenergie

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03
https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03

Check your stack JSON