delta electronics

Delta Electronics’ DIAView has a command-injection flaw that lets project files execute shell commands, creating a direct path from a crafted project to arbitrary code running on Windows engineering hosts — a serious escalation risk for industrial control systems that rely on trusted engineering...

Delta Electronics’ CNCSoft‑G2 HMI has an urgent file‑parsing vulnerability — tracked as CVE‑2025‑58317 — that allows arbitrary code execution when a user opens a specially crafted file; the flaw is rated high severity (CVSS v3.1 ≈ 7.8, CVSS v4 ≈ 8.5) and affects builds prior to the vendor’s...

Delta Electronics’ ASDA‑Soft engineering suite contains two newly disclosed stack‑based buffer overflow flaws that can corrupt memory when a user opens a specially crafted project file — and Delta has issued a patched release (ASDA‑Soft v7.1.1.0) to address the risk. The two CVEs (CVE‑2025‑62579...

Delta Electronics’ DIALink — a widely used industrial automation server — is the subject of a coordinated vulnerability disclosure that identifies two directory‑traversal / authentication‑bypass flaws (CVE‑2025‑58320 and CVE‑2025‑58321) affecting DIALink versions V1.6.0.0 and earlier, and urges...

CISA’s September 16, 2025 bulletin consolidates another urgent wave of Industrial Control Systems (ICS) security notices: eight advisories covering Schneider Electric, Hitachi Energy, Siemens, Delta Electronics and multiple Siemens product families, plus an update to a prior Schneider Galaxy...

CISA’s September 2, 2025 bulletin that released four new Industrial Control Systems (ICS) advisories is a stark reminder that operational technology (OT) and energy-sector devices remain high-value targets—and that defenders must move faster than vendors and attackers to close windows of...

Delta Electronics’ engineering tool EIP Builder contains an XML External Entity (XXE) vulnerability (CVE-2025-57704) that can expose sensitive files when the application parses crafted XML, and vendors and national incident responders now recommend an immediate upgrade to mitigate the risk...

Delta Electronics has published an advisory warning that its COMMGR engineering and simulation software contains multiple high‑severity vulnerabilities — including a stack‑based buffer overflow (CVE‑2025‑53418) and a code‑injection flaw (CVE‑2025‑53419) — that affect COMMGR versions up to and...

Delta Electronics’ CNCSoft‑G2 has been the focus of a coordinated disclosure that exposes a file‑parsing out‑of‑bounds write (CWE‑787) in the DPAX project file handler — a flaw tracked as CVE‑2025‑47728 that can lead to arbitrary code execution when a user opens a specially crafted file, and...

A newly disclosed vulnerability in Delta Electronics’ DIAView industrial automation management system has put critical infrastructure sectors on high alert, as experts warn of the significant risk posed by remotely exploitable path traversal flaws that could allow attackers to access or alter...

Delta Electronics’ DTN Soft sits at the center of a freshly disclosed security story—a tale that weaves together critical infrastructure, global supply chains, and the persistent risks introduced by unsafe software handling practices. This detailed analysis explores the core of CVE-2025-53416, a...

When examining the evolving cybersecurity threat landscape faced by industrial control systems, the recent disclosure of a critical vulnerability within Delta Electronics’ DTM Soft platform stands out as a reminder of the pressing need for proactive software security practices, particularly in...

Delta Electronics’ CNCSoft software, long regarded as a keystone utility in the integration between industrial automation and human-machine interfaces (HMIs), has entered a new phase—but not by evolution or enhancement. Instead, it’s a phase marked by high-severity, unpatched vulnerabilities and...

In the ever-evolving landscape of industrial automation and control systems, the security of software platforms used for programming programmable logic controllers (PLCs) is paramount. Delta Electronics’ ISPSoft, a widely deployed development suite for configuring and managing Delta PLCs...

The Critical Security Vulnerability in Delta Electronics COMMGR: What IT Professionals Need to Know The world of industrial control systems (ICS) and critical infrastructure is facing yet another significant cybersecurity challenge involving one of the key players: Delta Electronics. Known for...

Critical ICS Vulnerabilities: Delta Electronics & Keysight Exposures In recent advisories issued by the Cybersecurity and Infrastructure Security Agency (CISA), critical vulnerabilities have been identified in two widely used industrial control system (ICS) platforms. The affected products—Delta...

Delta Electronics CNCSoft-G2: Heap Overflow Exposed Delta Electronics’ CNCSoft-G2 human-machine interface software is under scrutiny after a recently disclosed heap-based buffer overflow vulnerability. With a CVSS v4 base score of 8.5—and a CVSS v3.1 score of 7.8—this flaw demands immediate...

Delta CNCSoft-G2 Heap Overflow: Secure Your HMI Now Delta Electronics has issued a cybersecurity advisory related to its CNCSoft-G2 human-machine interface (HMI) system—a key component in many industrial environments. The advisory details a heap-based buffer overflow vulnerability...

Delta Electronics CNCSoft-G2: Critical Vulnerability Threatens Industrial HMI Systems A newly discovered heap-based buffer overflow in Delta Electronics' CNCSoft-G2 human-machine interface (HMI) has raised significant security concerns for industries spanning critical infrastructure sectors...

Critical Heap-Based Buffer Overflow in Delta CNCSoft-G2: Update Your System Now Delta Electronics’ CNCSoft-G2 has come under scrutiny following the discovery of a serious heap-based buffer overflow vulnerability. Known as CVE-2025-22881, this vulnerability carries a CVSS v4 score of 8.5...