CVE-2024-34032

Summary

CVE-2024-34032 is a newly disclosed SQL injection vulnerability affecting the GetDIACloudList endpoint in Delta Electronics DIAEnergie. An attacker with valid credentials can exploit this issue to inject malicious SQL queries, potentially gaining unauthorized access to the underlying system and compromising its security. This vulnerability poses a significant risk and requires immediate remediation efforts from organizations using the affected product.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.