CVE-2022-0988CWE-319

Delta Electronics DIAEnergie CLEARTEXT Transmission of Sensitive Information

High · published March 25, 2022

CVSS v3.1
7.1
EPSS
1%
Percentile
43.3
In the wild
Unconfirmed
What it is

Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00518 · 43.3th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2022-03-25T18:02Z
EPSS history
Timeline
  • 25 MAR 18:02Z
    Delta Electronics DIAEnergie CLEARTEXT Transmission of Sensitive Information
    cvelistv5