CVE-2021-33003 Weak cryptography in Delta Electronics DIAEnergie
Attackers can retrieve cleartext passwords from Delta Electronics DIAEnergie due to weak hashing, exposing sensitive credentials in industrial control environments.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-33003?
CVE-2021-33003 is a medium-severity vulnerability in Deltaww Diaenergie, published on 30 Aug 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to retrieve passwords in cleartext due to a weak hashing algorithm.
Which versions are affected by CVE-2021-33003?
It affects 1 product.
Products include Deltaww Diaenergie.
How do I fix CVE-2021-33003?
No fix has been published for CVE-2021-33003 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-33003 being exploited?
There is no known exploitation of CVE-2021-33003 in the wild and no public exploit code.
Other vulnerabilities in Deltaww Diaenergie
- CVE-2024-4547 Delta Electronics DIAEnergie Unauthenticated SQL Injection
- CVE-2024-4548 Delta Electronics DIAEnergie SQL Injection
- CVE-2022-43774 SQL injection in Delta Electronics DIAEnergie
- CVE-2022-43775 SQL injection in Delta Electronics DIAEnergie
- CVE-2022-3214 Delta Electronics DIAEnergy Use of Hard-coded Credentials
Sources
Also known as GHSA-35qw-39fh-853x.