Delta Electronics DIAEnergie Path Traversal

Vulnerability

Delta Electronics DIAEnergie, an industrial energy management system, is vulnerable to a path traversal attack (CWE-37) in all versions prior to 1.9 [1]. This allows an attacker to write arbitrary files to arbitrary locations on the file system. No authentication or user interaction is required.

Exploitation

An attacker can exploit this vulnerability remotely over the network by sending specially crafted HTTP requests containing path traversal sequences (e.g., ../) to the affected service. No privileges or user interaction are needed, making the attack low complexity [1].

Impact

Successful exploitation allows the attacker to write arbitrary files to the file system. This can be leveraged to overwrite existing executables or plant malicious DLLs, potentially leading to remote code execution with high impact on confidentiality, integrity, and availability [1]. The CVSS v3 base score is 9.8.

Mitigation

Delta Electronics has released version 1.9 to address this vulnerability. Users should update to the latest version as recommended by the vendor. No workarounds have been provided [1].