CVE-2022-26839CWE-276
Delta Electronics DIAEnergie Incorrect Default Permissions
High · published March 29, 2022
What it is
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the DIAEnergie application, which may allow an attacker to plant new files (such as DLLs) or replace existing executable files.
The record
Technical detail
- CVSS v3.1
- 7.8 · HIGH
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00217 · 11.5th percentile
- Weakness
- CWE-276 · Incorrect Default Permissions
- Published
- 2022-03-29T16:37Z
EPSS history
Timeline