PT-2021-19998 · Delta Electronics · Diaenergie
CVE-2021-32955
·
Published
2021-08-30
·
Updated
2021-09-03
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Delta Electronics DIAEnergie versions 1.7.5 and prior
Description
The issue allows unrestricted file uploads, which may enable an attacker to remotely execute code.
Recommendations
For Delta Electronics DIAEnergie versions 1.7.5 and prior, consider restricting or disabling file upload functionality until a fix is available.
Fix
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Diaenergie