CVE-2022-0988
Delta Electronics DIAEnergie CLEARTEXT Transmission of Sensitive Information
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.1EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
25 Mar 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
Affected products
Delta Electronics · DIAEnergieWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →