CVE-2025-58321: Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.

PriorityP271critical10CVSS 3.1

AVNACLPRNUINSCCHIHAH

EPSS

1.22%

64.8th percentile

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
delta_electronics	dialink	<= 1.6.0.0	—
deltaww	dialink	< 1.8.0.0	1.8.0.0

Detection & IOCsextracted from sources · hover to see the quote

→Target product is Delta Electronics DIALink versions V1.6.0.0 and prior; detect exploitation attempts via path traversal patterns in HTTP requests targeting DIALink endpoints that result in authentication bypass ↗
→CVE-2025-58321 is remotely exploitable with no authentication and no user interaction required (PR:N/UI:N); monitor for unauthenticated path traversal requests to DIALink services from external/untrusted network sources ↗
→Scope is Changed (S:C) with High confidentiality, integrity, and availability impact; successful exploitation may result in full system compromise — correlate any unexpected process execution or file access anomalies on DIALink hosts with inbound path traversal traffic ↗

·No known public exploitation has been reported at time of advisory publication; no specific exploit code, IOCs, or attack infrastructure have been publicly disclosed ↗
·Affected versions are DIALink V1.6.0.0 and prior; patched version is V1.8.0.0 or later — version fingerprinting of DIALink deployments is necessary to scope detection efforts ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.