CVE-2025-15359
Unknown Unknown - Not Provided
Out-of-Bounds Write in DVP-12SE11T Risks Memory Corruption

Publication date: 2025-12-30

Last updated on: 2025-12-30

Assigner: Deltaww

Description
DVP-12SE11T - Out-of-bound memory write Vulnerability
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-30
Last Modified
2025-12-30
Generated
2026-06-16
AI Q&A
2025-12-30
EPSS Evaluated
2026-06-15
NVD
CVE-2025-15359
EUVD
EUVD-2025-205704
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
delta_electronics dvp-12se11t *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2025-15359 is an out-of-bounds memory write vulnerability (CWE-787) affecting the Delta Electronics DVP-12SE 11T product, specifically firmware versions prior to v2.16. This means that the device's firmware improperly writes data outside the allocated memory boundaries, which can lead to corruption of memory, crashes, or potentially allow an attacker to execute arbitrary code. [1]

Impact Analysis

This vulnerability can have a critical impact, as indicated by its CVSS score of 9.1. It can lead to denial of service (device crashes) or allow an attacker to execute arbitrary code on the affected device, potentially compromising the device's integrity and availability. This could disrupt industrial control processes relying on the device. [1]

Mitigation Strategies

To mitigate CVE-2025-15359, upgrade the device firmware to version 2.16 or later. Additionally, implement network-level countermeasures such as using IP whitelisting to restrict Modbus/TCP access to trusted IP addresses, applying network segmentation to isolate the device, and deploying industrial firewalls to monitor Modbus/TCP traffic. General security practices include avoiding exposure of control systems to the internet, placing systems behind firewalls and isolating them from business networks, and using secure remote access methods like VPNs. [1]

Compliance Impact

The provided resources do not specify how the CVE-2025-15359 vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.

Detection Guidance

The provided resources do not include specific detection methods or commands to identify the CVE-2025-15359 vulnerability on a network or system. The recommended mitigation is to upgrade the device firmware to version 2.16 or later. General security recommendations include network segmentation, using industrial firewalls to monitor Modbus/TCP traffic, and restricting Modbus/TCP access via IP whitelisting. However, no explicit detection commands or scanning techniques are provided. [1]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-15359. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart