CVE-2022-1366

9.8 criticalEPSS 19%

Critical (9.8) in deltaww diaenergie. EPSS 19% chance of exploitation in the next 30 days.

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 19% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2022-05-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

deltaww:diaenergie

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01
https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01

Check your stack JSON