File Parsing Vulnerability in Delta Electronics EIP Builder Software

CVE-2025-57704

What is CVE-2025-57704?

Delta Electronics EIP Builder version 1.11 is susceptible to a File Parsing vulnerability that arises from improper handling of XML input. This flaw can lead to XML External Entity (XXE) processing, potentially allowing an attacker to disclose sensitive information from the host system. Effective exploitation of this vulnerability could result in unauthorized access to confidential data, significantly impacting the security posture of the affected systems. It is crucial for users to implement recommended patches and apply security best practices to mitigate potential risks associated with this vulnerability.

References