CVE-2025-62581

The vulnerability is related to CWE-321, namely the use of a static, hardcoded cryptographic key embedded in the application. An attacker, knowing or reproducing such a key, can bypass authentication or encryption mechanisms implemented in the product. The attack can be conducted remotely, without authentication and without user interaction, which significantly lowers the entry threshold for a potential attacker.

An attacker can gain full control over the system — including confidentiality, integrity, and availability of data — which in an industrial environment (SCADA/HMI) can lead to disruption of production processes or their unauthorized modification.

Patches available from the manufacturer should be applied in accordance with the references — detailed information is contained in the Delta Electronics security bulletin: Delta-PCSA-2026-00001 available in the manufacturer's file center.

Delta Electronics DIAView — versions indicated in the manufacturer's references (document Delta-PCSA-2026-00001)