CVE-2022-27175

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetCalcTagList. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

• CWE-89
• CWE-89

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01Mitigation, Third Party Advisory, US Government Resource
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01Mitigation, Third Party Advisory, US Government Resource

Published

Mar 29, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27169An information disclosure vulnerability exists in the OAS En…7.5
• CVE-2022-2717The JoomSport – for Sports: Team & League, Football, Hockey …4.9
• CVE-2022-27170Protection mechanism failure in the Intel(R) Media SDK softw…7.8
• CVE-2022-27172A hard-coded password vulnerability exists in the console in…8.8
• CVE-2022-27173Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-27174Cross-site request forgery (CSRF) vulnerability in Easy Blog…4.3
• CVE-2022-27176Incomplete filtering of special elements vulnerability exist…7.8
• CVE-2022-27177A Python format string issue leading to information disclosu…9.8
• CVE-2022-27178A denial of service vulnerability exists in the confctl_set_…9.8
• CVE-2022-27179A malicious actor having access to the exported configuratio…6.5
• CVE-2022-2718The JoomSport – for Sports: Team & League, Football, Hockey …4.9
• CVE-2022-27180Uncontrolled search path in the Intel(R) MacCPUID software b…7.8