CVE-2025-58320

published 2025-09-11

CVE-2025-58320: Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.

Priority P2 62 high 7.3 CVSS 3.1

AV N AC L PR N UI N S U C L I L A L

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
delta_electronics	dialink	<= 1.6.0.0	—
deltaww	dialink	< 1.8.0.0	1.8.0.0

Detection & IOCs extracted from sources · hover to see the quote

• → Target product: Delta Electronics DIALink versions V1.6.0.0 and prior are vulnerable to path traversal authentication bypass (CVE-2025-58320) ↗
• → Vulnerability class is Path Traversal (CWE-22) enabling authentication bypass — monitor HTTP requests to DIALink for directory traversal sequences (e.g., ../, %2e%2e%2f) in URL paths that reach authenticated endpoints ↗
• → Attack is remotely exploitable with no authentication and low complexity — prioritize network-level detection and blocking of unauthenticated traversal attempts against DIALink services ↗

• · No known public exploitation has been reported at time of advisory publication ↗
• · Two separate CVEs (CVE-2025-58320 and CVE-2025-58321) cover path traversal auth bypass in DIALink; CVE-2025-58321 carries a critical CVSS v4 score of 10.0 with full confidentiality/integrity/availability impact — treat both as part of the same attack surface ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22