CVE-2022-26839CWE-276

Delta Electronics DIAEnergie Incorrect Default Permissions

High · published March 29, 2022

CVSS v3.1
7.8
EPSS
0%
Percentile
11.5
In the wild
Unconfirmed
What it is

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the DIAEnergie application, which may allow an attacker to plant new files (such as DLLs) or replace existing executable files.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00217 · 11.5th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2022-03-29T16:37Z
EPSS history
Timeline
  • 29 MAR 16:37Z
    Delta Electronics DIAEnergie Incorrect Default Permissions
    cvelistv5