1. Home
  2. CVE Database
  3. CVE-2023-0822
HIGH · 8.8

CVE-2023-0822

The affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorization and access privileged functionality.

Vulnerability Description

The affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorization and access privileged functionality.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
DeltawwDiaenergie< 1.9.03.001

Related Weaknesses (CWE)

CWE-285CWE-552

References

FAQ

What is CVE-2023-0822?

CVE-2023-0822 is a vulnerability with a CVSS score of 8.8 (HIGH). The affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorization and access privileged functionality.

How severe is CVE-2023-0822?

CVE-2023-0822 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-0822?

Check the references section above for vendor advisories and patch information. Affected products include: Deltaww Diaenergie.