Jump to the main content block

【Vulnerability Alert】A high-risk security vulnerability (CVE-2025-58321) exists in Delta Electronics DIALink. Please verify and apply patches as soon as possible.

publish date : 2025-09-19 update date : 2025-09-19

Source: Ministry of education information & communication security contingency platform

"" "" ""

Publication Number TACERT-ANA-2025091909092222 Publication Time 2025/09/19 09:12
Incident Type ANA-Vulnerability Alert Discovery Time 2025/09/19 09:12
Impact Level Medium  
[Subject]
【Vulnerability Alert】A high-risk security vulnerability (CVE-2025-58321) exists in Delta Electronics DIALink. Please verify and apply patches as soon as possible.
[Content]
Forwarded from the National Institute of Cyber Security NISAC-200-202509-00000067

Researchers have discovered a path traversal vulnerability (CVE-2025-58321) in Delta Electronics DIALink. An unauthenticated remote attacker can exploit this vulnerability to obtain sensitive information, thereby bypassing authentication and gaining access to the system. Please verify and apply patches as soon as possible.

Information Sharing Level: WHITE (Information content can be publicly disclosed)
[Affected Platform]
DIALink versions V1.6.0.0 and earlier.

[Recommended Actions]
The vendor has released a security update to address the vulnerability. Please refer to the official advisory for update instructions at the following URL:

https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00016_DIALink%20-%20Directory%20Traversal%20Authentication%20Bypass%20Vulnerability.pdf

[Reference]
1. https://nvd.nist.gov/vuln/detail/CVE-2025-58321

2. https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-58321

3. https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00016_DIALink%20-%20Directory%20Traversal%20Authentication%20Bypass%20Vulnerability.pdf

(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer: Computer Center
Click Num: