CVE-2025-58321CWE-22path-traversal

CVE-2025-58321

Critical · published September 11, 2025

CVSS v3.1
10.0
EPSS
1%
Percentile
70.2
In the wild
Unconfirmed
What it is

🚨 A sneaky directory traversal flaw in Delta Electronics DIALink can let attackers bypass authentication! 🔥 Think of it like an unmonitored staff entrance at a concert venue, allowing someone to slip in unnoticed while the security team is distracted. This vulnerability lets attackers navigate the file system without any official checks, like a VIP pass for anyone with the right moves! With this vulnerability, an attacker could gain unauthorized access to sensitive files and data, potentially leading to a complete compromise of the system! They could manipulate or even delete critical information, wreaking havoc on operations. The consequences could be absolutely devastating for any organization relying on DIALink for their infrastructure.

Put simply

Think of it like an unmonitored staff entrance at a concert venue, allowing someone to slip in unnoticed while the security team is distracted. This vulnerability lets attackers navigate the file system without any official checks, like a VIP pass for anyone with the right moves! This directory traversal vulnerability allows attackers to exploit improper input validation and access unauthorized directories and files without needing valid credentials. It essentially enables authentication bypass, opening the door to serious security risks.

What to do

With this vulnerability, an attacker could gain unauthorized access to sensitive files and data, potentially leading to a complete compromise of the system! They could manipulate or even delete critical information, wreaking havoc on operations. The consequences could be absolutely devastating for any organization relying on DIALink for their infrastructure. Immediately patch DIALink to the latest version to close this loophole. Review access controls and input validation practices to ensure they are robust enough to prevent similar attacks. Consider conducting a security audit to identify any other potential vulnerabilities in your setup. You've got this! With the right steps, you can secure your systems and keep the bad guys out! 🛡️

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01297 · 70.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-09-11T13:15Z
Affected products (1)
ProductVersionsFixed in
deltaww/dialink< 1.8.0.01.8.0.0
References (1)
EPSS history
Timeline
  • 11 SEP 08:50Z
    DIALink - Directory Traversal Authentication Bypass Vulnerability
    cvelistv5