CVE-2024-28029
Client-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Client-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie
Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality.
Reserved 2024-03-12 | Published 2024-03-21 | Updated 2024-10-17 | Assigner icscertCWE-602 Client-Side Enforcement of Server-Side Security
Michael Heinzl reported these vulnerabilities to CISA.
www.cisa.gov/news-events/ics-advisories/icsa-24-074-12
Support options
