ICS Delta Industrial Automation DIAEnergie DIAE_loopmapHandler.ashx SQL Injection (CVE-2022-26887)

Rule ID

1231355

Severity

Critical

Description

An SQL injection has been reported in Delta Industrial Automation DIAEnergie. The vulnerability is due to insufficient input validation when processing requests to the DIAE_loopmapHandler.ashx endpoint.

Impact

SQL injection

Recommendation

Update vendor's patch.

IPS Category

ICS threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A