CVE-2024-42417: Deltaww Diaenergie

High severity, CVSS 8.8. EPSS: 7% chance of exploitation in the next 30 days.

Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script Handler_CFG.ashx. An authenticated attacker may be able to exploit this issue to cause delay in the targeted product.

Affected products

• Deltaww Diaenergie: up to and including 1.10.01.008

Published 2024-10-03. Last modified 2026-06-17.