CVE-2021-31558

MEDIUM 6.1CVE-2021-31558 · Published 22/12/2021 · updated 17/06/2026

In short

CVE-2021-31558 is a MEDIUM (CVSS 6.1) vulnerability affecting diaenergie (deltaww).
Chance of exploitation in the next 30 days (EPSS): 10.6%, higher than 95.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
diaenergie deltaww	`≤ 1.7.5`	No fix yet

Description

DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “descr” of the script “DIAE_hierarchyHandler.ashx”.

References

cisa.gov/uscert/ics/advisories/icsa-21-238-03 · Third Party Advisory

More vulnerabilities in diaenergie

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free