VULNERABILITY INTELLIGENCE

CVE-2022-25347

CVSS score9.8 CRITICAL

EPSS probability11.39%

CISA KEVNot currently listed

Published2022-03-29

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files to locations on the file system.

Weakness classification

ics-cert@hq.dhs.gov: CWE-37
nvd@nist.gov: CWE-22

Primary references

ics-cert@hq.dhs.gov — Mitigation, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Third Party Advisory, US Government Resource