CVE-2025-59301
Denial of Service via Modbus/TCP Validation Flaw in Delta DVP15MC11T
Publication date: 2025-12-22
Last updated on: 2025-12-22
Assigner: Deltaww
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| delta_electronics | dvp15mc11t | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-20 | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability affects the Delta Electronics DVP15MC11T product, specifically versions prior to v1.16.0. It is caused by improper validation of Modbus/TCP packets, which can lead to a Denial of Service (DoS) condition. Essentially, the device does not properly check the input data it receives via the Modbus/TCP protocol, allowing an attacker to disrupt its normal operation. [1]
How can this vulnerability impact me? :
The vulnerability can cause a Denial of Service (DoS) on the affected device, meaning the device may become unresponsive or stop functioning correctly. This can disrupt operations that rely on the DVP15MC11T, potentially causing downtime or loss of control in industrial or automation environments. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
The provided resources do not include specific commands or detailed methods to detect this vulnerability on your network or system. It is recommended to monitor Modbus/TCP traffic for abnormal or malformed packets that could exploit improper input validation, but no explicit detection commands are given. [1]
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, upgrade the Delta Electronics DVP15MC11T firmware to version 1.16.0 or later, as no workaround is available. Additionally, avoid exposing control systems to the internet, place systems behind firewalls, isolate them from business networks, use secure remote access methods such as VPNs, and follow general cybersecurity best practices. [1]