CVE-2024-34032: Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the GetDIACloudList endpoint. An authenticated attacker can exploit…

PriorityP359high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

8.74%

94.5th percentile

Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the GetDIACloudList endpoint. An authenticated attacker can exploit this issue to potentially compromise the system on which DIAEnergie is deployed.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
delta_electronics	diaenergie	—	—
deltaww	diaenergie	—	—
github.com	cilium_cilium	>= 1.15.0 < 1.15.8	1.15.8
github.com	cilium_cilium	>= 1.16.0 < 1.16.1	1.16.1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.