CVE-2025-53415 - Vulnerability Details - OpenCVE

Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

No data.

No data.

No data.

References

Link	Providers
https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00009_DTM%20Soft%20and%20DTN%20Soft%20BIN%20File%20Parsing%20Deserialization%20of%20Untrusted%20Data.pdf

History

Tue, 01 Jul 2025 08:30:00 +0000

Type	Values Removed	Values Added
References	https://www.deltaww.com/en-US/Cybersecurity_Advisory

Tue, 01 Jul 2025 08:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 01 Jul 2025 08:00:00 +0000

Type	Values Removed	Values Added
References		https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00009_DTM%20Soft%20and%20DTN%20Soft%20BIN%20File%20Parsing%20Deserialization%20of%20Untrusted%20Data.pdf

Mon, 30 Jun 2025 09:15:00 +0000

Type	Values Removed	Values Added
Description		Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution
Title		File Parsing Deserialization of Untrusted Data in DTM Soft
Weaknesses		CWE-502
References		https://www.deltaww.com/en-US/Cybersecurity_Advisory
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: Deltaww

Published: 2025-06-30T09:09:32.624Z

Updated: 2025-07-01T07:49:57.750Z

Reserved: 2025-06-30T08:06:53.587Z

Link: CVE-2025-53415

Vulnrichment

Updated: 2025-06-30T15:16:24.352Z

NVD

Status : Awaiting Analysis

Published: 2025-06-30T09:15:26.903

Modified: 2025-07-01T08:15:24.610

Link: CVE-2025-53415

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-53415", "assignerOrgId": "759f5e80-c8e1-4224-bead-956d7b33c98b", "state": "PUBLISHED", "assignerShortName": "Deltaww", "dateReserved": "2025-06-30T08:06:53.587Z", "datePublished": "2025-06-30T09:09:32.624Z", "dateUpdated": "2025-07-01T07:49:57.750Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Windows"], "product": "DTM Soft", "vendor": "Delta Electronics", "versions": [{"lessThanOrEqual": "v1.6.0.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "datePublic": "2025-06-30T09:08:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution"}], "value": "Delta Electronics DTM Soft\u00a0Project File Parsing Deserialization of Untrusted Data Remote Code Execution"}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-502", "description": "CWE-502 Deserialization of Untrusted Data", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "759f5e80-c8e1-4224-bead-956d7b33c98b", "shortName": "Deltaww", "dateUpdated": "2025-07-01T07:49:57.750Z"}, "references": [{"url": "https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00009_DTM%20Soft%20and%20DTN%20Soft%20BIN%20File%20Parsing%20Deserialization%20of%20Untrusted%20Data.pdf"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">Delta Electronics recommends users update to DTM Soft v1.6.0.0 (Released at 2025/3/25)</span><span style=\"background-color: rgb(255, 255, 255);\"> or later.</span>\n\n<br>"}], "value": "Delta Electronics recommends users update to DTM Soft v1.6.0.0 (Released at 2025/3/25)\u00a0or later."}], "source": {"discovery": "EXTERNAL"}, "title": "File Parsing Deserialization of Untrusted Data in DTM Soft", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-06-30T15:16:11.675085Z", "id": "CVE-2025-53415", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-30T15:16:33.164Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-53415", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-06-30T15:16:11.675085Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-30T15:16:24.352Z"}}], "cna": {"title": "File Parsing Deserialization of Untrusted Data in DTM Soft", "source": {"discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Delta Electronics", "product": "DTM Soft", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "v1.6.0.0"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Delta Electronics recommends users update to DTM Soft v1.6.0.0 (Released at 2025/3/25)\u00a0or later.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">Delta Electronics recommends users update to DTM Soft v1.6.0.0 (Released at 2025/3/25)</span><span style=\"background-color: rgb(255, 255, 255);\"> or later.</span>\n\n<br>", "base64": false}]}], "datePublic": "2025-06-30T09:08:00.000Z", "references": [{"url": "https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00009_DTM%20Soft%20and%20DTN%20Soft%20BIN%20File%20Parsing%20Deserialization%20of%20Untrusted%20Data.pdf"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Delta Electronics DTM Soft\u00a0Project File Parsing Deserialization of Untrusted Data Remote Code Execution", "supportingMedia": [{"type": "text/html", "value": "Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-502", "description": "CWE-502 Deserialization of Untrusted Data"}]}], "providerMetadata": {"orgId": "759f5e80-c8e1-4224-bead-956d7b33c98b", "shortName": "Deltaww", "dateUpdated": "2025-07-01T07:49:57.750Z"}}}, "cveMetadata": {"cveId": "CVE-2025-53415", "state": "PUBLISHED", "dateUpdated": "2025-07-01T07:49:57.750Z", "dateReserved": "2025-06-30T08:06:53.587Z", "assignerOrgId": "759f5e80-c8e1-4224-bead-956d7b33c98b", "datePublished": "2025-06-30T09:09:32.624Z", "assignerShortName": "Deltaww"}, "dataVersion": "5.1"}