High severity8.8NVD Advisory· Published Oct 27, 2022· Updated Jun 17, 2026

CVE-2022-40967

Description

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckIoTHubNameExisted. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisagov/DIAEnergiellm-create
Range: <v1.9.01.002
Diaenerrgie/Diaenergiellm-fuzzy
Range: <v1.9.01.002
Delta Electronics/DIAEnergycpe-rescue
Range: All

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-22-298-06nvdMitigationThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000