Sign-up

ID

VAR-202508-2196


CVE

CVE-2025-57703


TITLE

Delta Electronics, INC.  of  DIAEnergie  Cross-site scripting vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2025-012069

DESCRIPTION

DIAEnergie - Reflected Cross-site Scripting. Delta Electronics, INC. It is used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency. Delta Electronics DIAEnergie suffers from a cross-site scripting vulnerability caused by improper validation of user-supplied input. No detailed vulnerability details are currently available

Trust: 2.16

sources: NVD: CVE-2025-57703 // JVNDB: JVNDB-2025-012069 // CNVD: CNVD-2025-22954

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2025-22954

AFFECTED PRODUCTS

vendor:deltawwmodel:diaenergiescope:ltversion:1.11.01.001

Trust: 1.0

vendor:deltamodel:diaenergiescope: - version: -

Trust: 0.8

vendor:deltamodel:diaenergiescope:eqversion:1.11.01.001

Trust: 0.8

vendor:deltamodel:diaenergiescope:eqversion: -

Trust: 0.8

vendor:deltamodel:electronics diaenergiescope:lteversion:<=1.11.00.002

Trust: 0.6

sources: CNVD: CNVD-2025-22954 // JVNDB: JVNDB-2025-012069 // NVD: CVE-2025-57703

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2025-57703
value: MEDIUM

Trust: 1.0

759f5e80-c8e1-4224-bead-956d7b33c98b: CVE-2025-57703
value: MEDIUM

Trust: 1.0

NVD: CVE-2025-57703
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2025-22954
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2025-22954
severity: MEDIUM
baseScore: 6.4
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2025-57703
baseSeverity: MEDIUM
baseScore: 6.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
exploitabilityScore: 2.8
impactScore: 2.7
version: 3.1

Trust: 1.0

NVD: CVE-2025-57703
baseSeverity: MEDIUM
baseScore: 6.1
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: CNVD: CNVD-2025-22954 // JVNDB: JVNDB-2025-012069 // NVD: CVE-2025-57703 // NVD: CVE-2025-57703

PROBLEMTYPE DATA

problemtype:CWE-79

Trust: 1.0

problemtype:Cross-site scripting (CWE-79) [ others ]

Trust: 0.8

sources: JVNDB: JVNDB-2025-012069 // NVD: CVE-2025-57703

PATCH

title:Patch for Delta Electronics DIAEnergie Cross-Site Scripting Vulnerability (CNVD-2025-22954)url:https://www.cnvd.org.cn/patchInfo/show/738741

Trust: 0.6

sources: CNVD: CNVD-2025-22954

EXTERNAL IDS

db:NVDid:CVE-2025-57703

Trust: 3.2

db:JVNDBid:JVNDB-2025-012069

Trust: 0.8

db:CNVDid:CNVD-2025-22954

Trust: 0.6

sources: CNVD: CNVD-2025-22954 // JVNDB: JVNDB-2025-012069 // NVD: CVE-2025-57703

REFERENCES

url:https://filecenter.deltaww.com/news/download/doc/delta-pcsa-2025-00012_diaenergie%20cross-site%20scripting%20vulnerabilities.pdf

Trust: 2.4

url:https://nvd.nist.gov/vuln/detail/cve-2025-57703

Trust: 0.8

sources: CNVD: CNVD-2025-22954 // JVNDB: JVNDB-2025-012069 // NVD: CVE-2025-57703

SOURCES

db:CNVDid:CNVD-2025-22954
db:JVNDBid:JVNDB-2025-012069
db:NVDid:CVE-2025-57703

LAST UPDATE DATE

2025-09-30T23:29:09.277000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2025-22954date:2025-09-29T00:00:00
db:JVNDBid:JVNDB-2025-012069date:2025-08-22T03:14:00
db:NVDid:CVE-2025-57703date:2025-08-21T14:32:15.890

SOURCES RELEASE DATE

db:CNVDid:CNVD-2025-22954date:2025-09-29T00:00:00
db:JVNDBid:JVNDB-2025-012069date:2025-08-22T00:00:00
db:NVDid:CVE-2025-57703date:2025-08-18T07:15:29.607