CVE-2024-43699

Summary

CVE-2024-43699 is a newly disclosed SQL injection vulnerability affecting Delta Electronics DIAEnergie. The issue lies in the AM_RegReport.aspx script, which is exploitable by unauthenticated attackers. Successful exploitation allows the adversary to gain access to sensitive records within the targeted product. The potential impact includes data theft or unauthorized system access, presenting a significant security risk. Users are strongly encouraged to apply the forthcoming patch or mitigation measure to protect their installations from potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.