High severity · published Oct 9, 2023
CVE-2023-5459
Delta Electronics DVP32ES2 PLC Password Transmission denial of service
7.5
CVSS
1.1%
EPSS
No
On KEV
Description
A vulnerability has been found in Delta Electronics DVP32ES2 PLC 1.48 and classified as critical. This vulnerability affects unknown code of the component Password Transmission Handler. The manipulation leads to denial of service. The exploit has been disclosed to the public and may be used. VDB-241582 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DP
DVP32ES2 PLC · Delta Electronics
1.48 · source: vendor
DF
Dvp32es200r Firmware · Deltaww
1.48 · source: NVD
DF
Dvp32es200rc Firmware · Deltaww
1.48 · source: NVD
DF
Dvp32es200re Firmware · Deltaww
1.48 · source: NVD
DF
Dvp32es200t Firmware · Deltaww
1.48 · source: NVD
DF
Dvp32es200tc Firmware · Deltaww
1.48 · source: NVD
DF
Dvp32es200te Firmware · Deltaww
1.48 · source: NVD
DF
Dvp32es211t Firmware · Deltaww
1.48 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-5459
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-5459
Permissions Required
https://drive.google.com/drive/folders/1mUKkl_NPoUENpPUq-pdQQaEEGvKAaIFB
Permissions Required
https://vuldb.com/?ctiid.241582
Third Party Advisory
https://vuldb.com/?id.241582