description: Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to add a new administrative user without being authenticated or authorized, which may allow the attacker to log in and use the device with administrative privileges.
problem types: AUTHENTICATION BYPASS USING AN ALTERNATE PATH OR CHANNEL CWE-288
affected:
{
product: Delta Electronics DIAEnergie
vendor: n/a
versions:
status: affected, version: DIAEnergie Version 1.7.5 and prior
}