Modbus TCP Service Vulnerability in Delta Electronics DVP12SE PLC
CVE-2026-12819

9.3CRITICAL

Key Information:

Vendor

Deltaww

Status
Dvp-12se
Vendor
CVE Published:
30 June 2026

What is CVE-2026-12819?

The Delta Electronics DVP12SE PLC is vulnerable due to its exposure of a Modbus TCP service on a specified port without necessary authentication or access control. This flaw allows unauthorized individuals to interact with critical PLC functions, leading to potential manipulation of the device and risks to operational integrity. Users should take precautions to secure their devices and ensure that access controls are effectively implemented.

Affected Version(s)

DVP-12SE *

References

https://filecenter.deltaww.com/news/download/doc/Delta-PC...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

CISA
Adm Bin Harbi (0xnoag) - Corvo Security
.