Delta Electronics DVP-12SE11T Password Protection Bypass Vulnerability

A password protection bypass vulnerability has been identified in Delta Electronics DVP-12SE11T firmware versions prior to 2.16. This vulnerability allows authentication to be bypassed, potentially leading to unauthorized access or actions on the device.

Impact

Exploitation of this vulnerability allows for authentication bypass, enabling unauthorized users to gain access or privileges on the affected device.

Remediation

Users are advised to upgrade the firmware to version 2.16 or later. For this vulnerability, it is also recommended to implement robust network-level countermeasures, such as using industrial firewalls to monitor Modbus/TCP traffic, and to utilize the product's IP whitelisting feature to restrict Modbus/TCP access to trusted client IP addresses.