CVE-2022-26839 Delta Electronics DIAEnergie Incorrect Default Permissions
Incorrect default permissions in Delta DIAEnergie allow attackers to plant or replace executable files, potentially leading to code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-26839?
CVE-2022-26839 is a high-severity vulnerability in Deltaww Diaenergie, published on 29 Mar 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the DIAEnergie application, which may allow an attacker to plant new files (such as DLLs) or replace existing executable files.
Weakness: CWE-276
Which versions are affected by CVE-2022-26839?
It affects 1 product.
Products include Deltaww Diaenergie.
How do I fix CVE-2022-26839?
No fix has been published for CVE-2022-26839 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-26839 being exploited?
There is no known exploitation of CVE-2022-26839 in the wild and no public exploit code.
Other vulnerabilities in Deltaww Diaenergie
- CVE-2024-4547 Delta Electronics DIAEnergie Unauthenticated SQL Injection
- CVE-2024-4548 Delta Electronics DIAEnergie SQL Injection
- CVE-2022-43774 SQL injection in Delta Electronics DIAEnergie
- CVE-2022-43775 SQL injection in Delta Electronics DIAEnergie
- CVE-2022-3214 Delta Electronics DIAEnergy Use of Hard-coded Credentials
Sources
Also known as GHSA-jf5q-mjg7-6xrp.