PT-2025-53856 · Delta Electronics · Dvp-12Se11T

Published 2025-12-30 · Updated 2026-01-15 · CVE-2025-15102

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DVP-12SE11T (affected versions not specified)

Description Password protection on the DVP-12SE11T Programmable Logic Controller (PLC) can be bypassed remotely without authentication. This allows unauthorized access and potential manipulation of the PLC’s functionality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

BDU:2026-00282

CVE-2025-15102

Affected Products

Dvp-12Se11T

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2025-15102 · Security Note
• https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00022_DVP-12SE11T%20Multiple%20Vulnerabilities.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00282 · Security Note
• https://osv.dev/vulnerability/CVE-2025-15102 · Vendor Advisory
• https://twitter.com/cracbot/status/2007769039356215613 · Twitter Post
• https://twitter.com/CVEnew/status/2005932296549859337 · Twitter Post
• https://twitter.com/0dayPublishing/status/2005929538245599377 · Twitter Post
• https://twitter.com/ThreatSynop/status/2011772158217691498 · Twitter Post
• https://t.me/CVEtracker/40926 · Telegram Post
• https://t.me/cveNotify/147118 · Telegram Post
• https://twitter.com/TheHackerWire/status/2005938632318939612 · Twitter Post