CVE-2025-15358CWE-20

CVE-2025-15358

High · published December 30, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
24.1
In the wild
Unconfirmed
What it is

⚡ A single misconfigured service can knock your entire system offline! This Denial of Service vulnerability in DVP-12SE11T is no joke! 🔥 Think of it like a traffic jam on a busy highway; one accident causes a backup that halts the flow of cars. Similarly, this vulnerability can bring your services to a standstill, disrupting everything in its path. If exploited, an attacker could flood the service, causing it to slow down significantly or even crash completely. This means your users may be left in the dark, unable to access crucial services, resulting in potential financial losses and a damaged reputation.

Put simply

Think of it like a traffic jam on a busy highway; one accident causes a backup that halts the flow of cars. Similarly, this vulnerability can bring your services to a standstill, disrupting everything in its path. The DVP-12SE11T vulnerability allows for a Denial of Service condition by overwhelming the service with requests, causing resource exhaustion. This leads to degraded performance or complete service shutdown, affecting all users dependent on the service.

What to do

If exploited, an attacker could flood the service, causing it to slow down significantly or even crash completely. This means your users may be left in the dark, unable to access crucial services, resulting in potential financial losses and a damaged reputation. To mitigate this vulnerability, ensure proper rate-limiting and request validation are in place. Review and update the service configuration and deploy patches as they become available. This is fixable! Follow these steps, and you'll have your services running smoothly in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00323 · 24.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-12-30T14:15Z
Affected products (1)
ProductVersionsFixed in
deltaww/dvp-12se11t_firmware< 2.162.16
References (1)
EPSS history
Timeline
  • 30 DEC 09:04Z
    DVP-12SE11T - Denial of Service Vulnerability
    cvelistv5