EUVD-2026-40932
GHSA-7fmx-whj8-2pcw
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessGain access to OT network segment
-
DeliveryReach exposed DVP80ES3 service
-
ExploitSend request bypassing flawed security check
-
ExecutionTrigger loss of device availability
-
ImpactDisrupt controlled physical process
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V12 - Secure Communication Improperly implemented security check
|
| Exploitation Conditions | Per the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N), no authentication, no user interaction, and no special attack requirements are needed - a remote attacker only needs network reachability to the DVP80ES3's affected service. The primary limiting factor is network exposure: PLCs are normally deployed on segmented OT networks not directly reachable from the internet or IT LAN, so realistic exploitation requires the attacker to already have a foothold on, or a routable path to, the industrial network segment. The exact triggering feature/protocol is not specified in the available data and should be confirmed against Delta advisory Delta-PCSA-2026-00009. |
| Impact | The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N, VA:H, VC:N/VI:N) describes an unauthenticated, low-complexity, network-reachable attack whose sole scored consequence is high availability impact - i.e., a denial-of-service or device disruption, not data theft or manipulation. This is a meaningful concern in OT/ICS environments where PLC downtime can halt physical processes, and the 8.7 High score reflects that. However, no EPSS score, POC, or KEV entry was provided, so there is no evidence of active or automated exploitation - the priority rests on the ease of attack (no auth, low complexity) rather than demonstrated in-the-wild activity. A clear conflict exists: the vendor tags say 'Information Disclosure' (a confidentiality outcome) while the CVSS vector scores VC:N and only VA:H (availability). This discrepancy should be resolved against the Delta advisory before finalizing impact classification, as the true impact may be confidentiality-related and mis-scored, or the tag may be inaccurate. |
| Exploit ScenarioDerived | An attacker with network access to the OT segment sends crafted traffic to the DVP80ES3's exposed service, exploiting the improperly implemented security check without needing credentials or user interaction, causing the PLC to lose availability and disrupting the physical process it controls. No public proof-of-concept exists at time of analysis, so this reflects the theoretical path implied by the CVSS vector rather than a demonstrated exploit. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 01, 2026
Denial-of-service exposure in the Delta Electronics DVP80ES3 programmable logic controller (part of the DVP-ES3 series) stems from an improperly implemented standard security check (CWE-358) that a remote, unauthenticated attacker can abuse over the network to force a loss of availability. The CVSS 4.0 base score is 8.7 (High), driven entirely by high availability impact with no confidentiality or integrity impact in the scored vector. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; note that the vendor's tags label this 'Information Disclosure,' which conflicts with the availability-only CVSS vector and should be verified against the Delta advisory.
RemediationAI
Consult Delta advisory Delta-PCSA-2026-00009 (https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00009_DVP80ES3%20Multiple%20Vulnerabilities_v1%20(CVE-2026-12575,%2012576,%2012577).pdf) and apply the vendor-recommended firmware update for the DVP80ES3; a specific patched version could not be independently confirmed from the provided data, so verify the exact fixed release in that advisory. Because this is an ICS/PLC device with network attack surface, apply compensating controls per standard OT hardening: place the PLC on an isolated OT network segment behind a firewall and deny the affected management/fieldbus ports from untrusted networks (trade-off: legitimate remote engineering/SCADA access must be explicitly allowed through the firewall), restrict access to only known engineering workstations and SCADA hosts via allow-listing (trade-off: requires accurate asset inventory), and require VPN for any remote access to the OT zone. Given the high availability impact, also ensure the controlled process has fail-safe/monitoring so a device disruption does not create an unsafe physical condition.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The affected device is a Delta DVP80ES3, an industrial programmable logic controller (PLC) from the DVP-ES3 slim-type series used in factory/OT automation, identified by CPE cpe:2.3:a:deltaww:dvp80es3. The root cause is classified as CWE-358 (Improperly Implemented Security Check for Standard), meaning a security control the device is supposed to enforce according to a standard or specification is implemented incompletely or incorrectly, allowing the intended protection to be bypassed or subverted. Because PLCs typically expose fieldbus/industrial protocols and management services over the network, a flawed security check in that stack can be reached remotely as reflected by the AV:N (network) attack vector.
Know when Dvp80Es3 gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Network-reachable, unauthenticated, low-complexity per the vendor 4.0 vector; scored impact is availability-only (A:H) with no confidentiality or integrity effect, consistent with a DoS on the PLC.
Primary rating from Vendor (Deltaww).
CVSS VectorVendor: Deltaww
DescriptionCVE.org
DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability.
Executive ViewAI
Delta Electronics DVP80ES3 programmable logic controllers are vulnerable to remote denial-of-service attacks by unauthenticated attackers (CVE-2026-12577, CVSS 8.7) due to improper security implementation, placing critical industrial control operations at immediate risk of unavailability. No public exploit identified at time of analysis, but the ease of attack (no authentication required, network-accessible) and absence of vendor patches create acute operational risk for manufacturing and process-control environments. Organizations must implement aggressive network isolation immediately while awaiting vendor remediation.
No vendor-released patch identified at time of analysis. Implement: (1) Restrict DVP80ES3 network access via firewall rules and VLAN isolation-permit connections only from authorized engineering workstations and remove unnecessary remote access; (2) Deploy network monitoring to detect DoS attack signatures (connection floods, unusual traffic volumes, scan patterns); (3) Air-gap affected PLCs from general corporate networks if operational constraints allow; (4) Establish manual override procedures and maintain redundant control pathways to sustain critical operations during PLC unavailability; (5) Maintain current device configuration backups and document operator procedures for emergency failover.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Denial of service in Delta Electronics DVP80ES3 programmable logic controllers arises from an improper resource shutdown
Denial of service in Delta Electronics DVP80ES3 programmable logic controllers arises from a failure to enforce message
Exploit-DB