CVE-2022-3214: Deltaww Diaenergie

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to  1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing remote code execution.

Affected products

• Deltaww Diaenergie: before 1.9.03.009 (fixed in 1.9.03.009)

Published 2022-09-16. Last modified 2026-06-17.