CVE-2025-15102: DVP-12SE11T - Password Protection Bypass
DVP-12SE11T - Password Protection Bypass
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Enable the device's built-in IP whitelisting feature to restrict Modbus/TCP access solely to known, trusted client IP addresses.
DVP-12SE11T IP whitelisting = Allow only known, trusted client IP addresses - Compensating control
Place the DVP-12SE11T product within a highly segregated network zone.
- Compensating control
Use industrial firewalls to monitor Modbus/TCP traffic.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15102?
CVE-2025-15102 has been rated as a significant security issue due to its potential for allowing password protection bypass.
How do I fix CVE-2025-15102?
To mitigate CVE-2025-15102, it is recommended to update the Deltaww DVP-12SE11T firmware to version 2.16 or higher.
What systems are affected by CVE-2025-15102?
CVE-2025-15102 affects the Deltaww DVP-12SE11T firmware versions prior to 2.16.
What type of vulnerability is CVE-2025-15102?
CVE-2025-15102 is classified as a password protection bypass vulnerability.
Can CVE-2025-15102 be exploited remotely?
Yes, CVE-2025-15102 can potentially be exploited remotely, allowing unauthorized access to affected systems.