CVE-2025-62578: DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information
DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Enable the device's built-in IP whitelisting feature and allow Modbus/TCP access only from known, trusted client IP addresses.
Product IP whitelisting = Restrict Modbus/TCP access to known, trusted client IP addresses - Compensating control
Place the product within a highly segregated network zone.
- Compensating control
Use industrial firewalls to monitor Modbus/TCP traffic.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62578?
CVE-2025-62578 is considered a high severity vulnerability due to the cleartext transmission of sensitive information.
How do I fix CVE-2025-62578?
To mitigate CVE-2025-62578, it is recommended to implement encryption protocols for Modbus/TCP communication.
Which devices are affected by CVE-2025-62578?
CVE-2025-62578 specifically affects the Delta DVP-12SE and its firmware versions.
What kind of information is exposed by CVE-2025-62578?
CVE-2025-62578 exposes sensitive information like passwords and configuration details due to cleartext transmission.
Is there an update available for CVE-2025-62578?
As of now, a specific firmware update for CVE-2025-62578 has not been mentioned publicly.