Description
Delta工业自动化DIAEnergie存在任意文件上传漏洞，该漏洞是由于在HandlerPage_KID.aspx中处理文件上传时对输入验证错误造成的。
Delta工业自动化DIAEnergie CVE-2022-25347任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2022-25347
https://github.com/advisories/GHSA-g72m-m9vm-p582
https://www.cisa.gov/news-events/ics-advisories/icsa-22-081-01
https://socradar.io/free-tools/cve-radar/CVE-2022-25347
https://advisories.checkpoint.com/defense/advisories/public/2022/cpai-2022-0882.html
https://strobes.co/vi/cve/CVE-2022-25347
https://osv.dev/vulnerability/CVE-2022-25347
https://devhub.checkmarx.com/cve-details/cve-2022-25347/
https://www.manageengine.com/vulnerability-management/vulnerability-database/vmp-271442.html
https://jvn.jp/vu/JVNVU99338807/index.html
https://feedly.com/cve/CVE-2022-25347
https://echelongraph.io/pulse/CVE-2022-25347/blast-radius
https://www.tenable.com/plugins/nessus/190220
https://www.cve.org/CVERecord?id=CVE-2022-3214