CVE-2024-43699: Deltaww Diaenergie

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script AM_RegReport.aspx. An unauthenticated attacker may be able to exploit this issue to obtain records contained in the targeted product.

Affected products

• Deltaww Diaenergie: up to and including 1.10.01.008

Published 2024-10-03. Last modified 2026-06-17.