Vulnerabilities

CVSS

9.3 Critical

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Risk score

74.4

Published

2026-06-30

Status

Published

Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions.

Weaknesses

CWE-306

Coverage 1

vulnerability

Delta Electronics DVP12SE PLC

This advisory details a critical vulnerability in Delta Electronics’ DVP12SE PLC, exposing it to unauthorized remote access and control. The PLC’s Modbus TCP service lacks authentication, allowing attackers to potentiall…

CISA Advisories · Jun 30, 2026 Critical

CVE-2026-12819CVE-2026-12818TWplcmodbusiot

All articles mentioning it

Advisories and references

• filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00011_DVP12...