PT-2026-3203 · Delta Electronics · Diaview

Tenable · Published 2026-01-15 · Updated 2026-01-16 · CVE-2025-62581

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAView (affected versions not specified)

Description DIAView, a data collection and process control automation system, contains issues related to security. One issue involves a lack of authentication for a critical function, potentially allowing a remote attacker to gain unauthorized access to the system. Another issue is the use of a hardcoded cryptographic key, which could allow a remote attacker to compromise the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

CWE-321

Related Identifiers

BDU:2026-00521

BDU:2026-00522

CVE-2025-62581

Affected Products

Diaview

References · 6

• https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00001_DIAView%20Multiple%20Vulnerabilities%20(CVE-2025-62581,%20CVE-2025-62582).pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62581 · Security Note
• https://bdu.fstec.ru/vul/2026-00522 · Security Note
• https://osv.dev/vulnerability/CVE-2025-62581 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00521 · Security Note
• file:///C:/Users/gaa33/Downloads/Delta-PCSA-2026-00001_DIAView%20Multiple%20Vulnerabilities%20(CVE-2025-62581,%20CVE-2025-62582).pdf · Note