CVE-2025-15102CWE-288

CVE-2025-15102

Critical · published December 30, 2025

CVSS v3.1
9.1
EPSS
0%
Percentile
23.4
In the wild
Unconfirmed
What it is

🚨 A classic case of security checks taking a vacation! This DVP-12SE11T vulnerability lets attackers bypass password protection like a bouncer ignoring a fake ID. 🔥 Think of it like a restaurant where anyone can walk past the entrance without showing a reservation. The bouncer, who should verify identities, is busy scrolling on his phone, and suddenly, anyone can claim they belong. An attacker could gain unauthorized access to sensitive areas of your system, potentially exposing confidential data or enabling malicious actions. This is absolutely devastating since it effectively nullifies your password protection, allowing anyone to stroll right in and do whatever they please!

Put simply

Think of it like a restaurant where anyone can walk past the entrance without showing a reservation. The bouncer, who should verify identities, is busy scrolling on his phone, and suddenly, anyone can claim they belong. This vulnerability allows attackers to bypass password authentication due to a flaw in the validation process, effectively opening up secure areas of your application without proper credentials.

What to do

An attacker could gain unauthorized access to sensitive areas of your system, potentially exposing confidential data or enabling malicious actions. This is absolutely devastating since it effectively nullifies your password protection, allowing anyone to stroll right in and do whatever they please! Immediately patch the system to the fixed version provided by the vendor. Review your authentication mechanisms and implement additional security layers such as multi-factor authentication to bolster defenses. You've got this! Follow these steps, and you'll be back in control of your security in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00317 · 23.4th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2025-12-30T14:15Z
Affected products (1)
ProductVersionsFixed in
deltaww/dvp-12se11t_firmware< 2.162.16
References (1)
EPSS history
Timeline
  • 30 DEC 08:48Z
    DVP-12SE11T - Password Protection Bypass
    cvelistv5