CVE-2024-34032

8.8 highEPSS 8.7%

High (8.8) in deltaww diaenergie. EPSS 8.7% chance of exploitation in the next 30 days.

Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the GetDIACloudList endpoint. An authenticated attacker can exploit this issue to potentially compromise the system on which DIAEnergie is deployed.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 8.7% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2024-05-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

deltaww:diaenergie

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-02
https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-02

Check your stack JSON