Industrial CVE-2025-62582
CRITICALCVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionNVD
Delta Electronics DIAView has multiple vulnerabilities.
AnalysisAI
Delta Electronics DIAView has a missing authentication vulnerability that allows remote attackers to access critical functionality without credentials, potentially compromising SCADA monitoring.
Technical ContextAI
DIAView exposes critical functionality without requiring authentication (CWE-306), allowing any network-adjacent attacker to access monitoring and potentially control functions of the SCADA system.
RemediationAI
Apply Delta patches for both CVE-2025-62581 and CVE-2025-62582. Ensure DIAView is not accessible from untrusted networks.
Share
External POC / Exploit Code
Leaving vuln.today