CVE-2022-41133: Deltaww Diaenergie

High severity, CVSS 8.8. EPSS: 26.6% chance of exploitation in the next 30 days.

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingsListParameters. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

Affected products

• Deltaww Diaenergie: before 1.9.01.002 (fixed in 1.9.01.002)

Published 2022-10-27. Last modified 2026-06-17.