CVE-2022-0988

Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product.

• CWE-319
• CWE-319

• https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-03Mitigation, Patch, Third Party Advisory, US Government Resource
• https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-03Mitigation, Patch, Third Party Advisory, US Government Resource

Published

Mar 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0982The telnet_input_char function in opt/src/accel-pppd/cli/tel…9.8
• CVE-2022-0983An SQL injection risk was identified in Badges code relating…8.8
• CVE-2022-0984Users with the capability to configure badge criteria (teach…4.3
• CVE-2022-0985Insufficient capability checks could allow users with the mo…4.3
• CVE-2022-0986Reflected Cross-site Scripting (XSS) Vulnerability in GitHub…6.1
• CVE-2022-0987A flaw was found in PackageKit in the way some of the method…3.3
• CVE-2022-0989An unprivileged user could use the functionality of the NS W…7.5
• CVE-2022-0990Server-Side Request Forgery (SSRF) in GitHub repository jane…9.1
• CVE-2022-0991Insufficient Session Expiration in GitHub repository admidio…7.1
• CVE-2022-0992The SiteGround Security plugin for WordPress is vulnerable t…9.8
• CVE-2022-0993The SiteGround Security plugin for WordPress is vulnerable t…9.8
• CVE-2022-0994The Hummingbird WordPress plugin before 3.3.2 does not sanit…4.8