PT-2025-31895 · Daview · Diaview

Published 2025-03-05 · Updated 2025-08-13 · CVE-2025-53417

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions DIAView versions prior to 4.2.0

Description DIAView software contains a directory traversal flaw that could lead to information disclosure.

Recommendations Update DIAView to a version later than 4.2.0.

Fix

Weakness Enumeration

CWE-35

Related Identifiers

BDU:2026-07555

CVE-2025-53417

ZDI-25-831

ZDI-25-832

Affected Products

Diaview

References · 10

• https://zerodayinitiative.com/advisories/ZDI-25-831 · Security Note
• https://bdu.fstec.ru/vul/2026-07555 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-832 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-53417 · Security Note
• https://exploitdog.ru/cve/nvd/CVE-2025-53417 · Note
• https://t.me/CVEtracker/29164 · Telegram Post
• https://twitter.com/SecAideInfo/status/1953400044947980391 · Twitter Post
• https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00010_DIAView%20Directory%20Traversal%20Information%20Disclosure.pdf · Note
• https://cisa.gov/news-events/ics-advisories/icsa-25-219-01 · Note
• https://t.me/cveNotify/130867 · Telegram Post