PT-2022-13658 · Delta Electronics · Diaenergie

Published 2022-04-01 · Updated 2022-04-08 · CVE-2022-1098

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004

Description The issue allows for a DLL hijacking condition, which, when combined with an Incorrect Default Permissions vulnerability, enables an attacker to escalate privileges.

Recommendations For versions prior to 1.8.02.004, update to version 1.8.02.004 or later to resolve the issue.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2022-1098

Affected Products

Diaenergie

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-1098 · Security Note
• https://osv.dev/vulnerability/CVE-2022-1098 · Vendor Advisory
• https://t.me/cibsecurity/40028 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsa-22-081-01 · Note