CVE-2022-3214

published 2022-09-16

CVE-2022-3214: Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to…

Priority P2 61 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to

1.9.03.009

have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing remote code execution.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
delta_electronics	diaenergy	>= all < 1.9.03.009	1.9.03.009
deltaww	diaenergie	< 1.9.03.009	1.9.03.009

Detection & IOCs extracted from sources · hover to see the quote

• → Exploit vector: executable files uploaded to certain directories using a hard-coded bearer authorization token — monitor HTTP requests containing a static/hard-coded 'Authorization: Bearer' header targeting DIAEnergie upload endpoints ↗
• → Focus detection on unauthenticated (PR:N) remote file-upload requests to DIAEnergie web endpoints; no prior authentication is required, so any bearer-token-authenticated upload from an untrusted source is suspicious ↗

• · No concrete hard-coded bearer token value, upload endpoint path, or exploit PoC has been publicly disclosed in these sources — the specific credential and target directory remain undocumented in available advisories ↗
• · No known public exploits specifically target this vulnerability at time of advisory publication ↗
• · Vulnerability is fixed in DIAEnergie version 1.9.03.009; all versions prior to this are affected ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-798