CVE-2023-5459
A vulnerability has been found in Delta Electronics DVP32ES2 PLC 1.48 and classified as critical.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.88%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A vulnerability has been found in Delta Electronics DVP32ES2 PLC 1.48 and classified as critical. This vulnerability affects unknown code of the component Password Transmission Handler. The manipulation leads to denial of service. The exploit has been disclosed to the public and may be used. VDB-241582 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.88% probability · 57th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-404
- Affected
- deltaww/dvp32es200r firmware · deltaww/dvp32es200t firmware · deltaww/dvp32es211t firmware · deltaww/dvp32es200rc firmware · deltaww/dvp32es200tc firmware · deltaww/dvp32es200re firmware · deltaww/dvp32es200te firmware
- Source
- cna@vuldb.com
References
- https://drive.google.com/drive/folders/1mUKkl_NPoUENpPUq-pdQQaEEGvKAaIFBPermissions Required
- https://vuldb.com/?ctiid.241582Permissions Required, Third Party Advisory
- https://vuldb.com/?id.241582Third Party Advisory
- https://drive.google.com/drive/folders/1mUKkl_NPoUENpPUq-pdQQaEEGvKAaIFBPermissions Required
- https://vuldb.com/?ctiid.241582Permissions Required, Third Party Advisory
- https://vuldb.com/?id.241582Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.