Remote Code Execution Vulnerability in Delta Electronics DIAScreen
CVE-2025-59298

6.8MEDIUM

Key Information:

Vendor

Delta Electronics
Status
Diascreen
Vendor
CVE Published:
3 October 2025

What is CVE-2025-59298?

The DIAScreen product by Delta Electronics lacks adequate validation of user-supplied files. This insufficiency may allow attackers to exploit the vulnerability; when a malicious file is opened, it can lead to the execution of arbitrary code within the context of the running process, posing a significant security risk.

Affected Version(s)

DIAScreen Windows 0 < 1.6.1

References

https://filecenter.deltaww.com/news/download/doc/Delta-PC...

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Natnael Samson working with Trend Micro Zero Day Initiative
Kevin Harwood of CISA
JSON
.
CVE-2025-59298 : Remote Code Execution Vulnerability in Delta Electronics DIAScreen