Directory Traversal Authentication Bypass in Delta Electronics DIALink
CVE-2025-58321

10CRITICAL

Key Information:

Status
Vendor
CVE Published:
11 September 2025

What is CVE-2025-58321?

Delta Electronics DIALink is susceptible to a Directory Traversal Authentication Bypass vulnerability that may allow unauthorized access to sensitive files by traversing directory paths. This vulnerability could lead to exposure of confidential information and undermine system security if not properly mitigated.

Affected Version(s)

DIALink Windows 0 <= 1.6.0.0

References

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Independent researcher Rangin Sima (Kamel)
.