VULNERABILITY INTELLIGENCE

CVE-2022-0988

CVSS score7.1 HIGH

EPSS probability0.52%

CISA KEVNot currently listed

Published2022-03-25

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

Description

Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product.

Weakness classification

ics-cert@hq.dhs.gov: CWE-319
nvd@nist.gov: CWE-319

Primary references

ics-cert@hq.dhs.gov — Mitigation, Patch, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Patch, Third Party Advisory, US Government Resource