Forwarded from the National Information Security Information Sharing and Analysis Center (NISAC-200-202509-00000067)

[Content Description]
Researchers have discovered a path traversal vulnerability (CVE-2025-58321) in Delta Electronics' DIALink. An unauthenticated remote attacker could exploit this vulnerability to obtain sensitive information, bypass authentication, and access the system. Please verify and patch as soon as possible.

[Affected Platforms]
DIALink V1.6.0.0 and earlier

[Recommended Action]
An official update has been released to fix the vulnerability. Please refer to the official instructions for updating: https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00016_DIALink%20-%20Directory%20Traversal%20Authentication%20Bypass%20Vulnerability.pdf

[References]
1. https://nvd.nist.gov/vuln/detail/CVE-2025-58321
2. https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-58321
3. https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00016_DIALink%20-%20Directory%20Traversal%20Authentication%20Bypass%20Vulnerability.pdf