CVE-2022-3214

Name of the Vulnerable Software and Affected Versions DIAEnergie versions prior to 1.9.03.009

Description The issue is related to the use of hard-coded credentials in the DIAEnergie industrial energy management system. This allows a remote attacker to execute arbitrary code by uploading executable files to certain directories using hard-coded bearer authorization.

Recommendations For versions prior to 1.9.03.009, update to version 1.9.03.009 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable directories to minimize the risk of exploitation. Avoid using hard-coded bearer authorization in the affected system until the issue is resolved.