Sign-up

ID

VAR-202508-2245


CVE

CVE-2025-57701


TITLE

Delta Electronics, INC.  of  DIAEnergie  Cross-site scripting vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2025-012070

DESCRIPTION

DIAEnergie - Reflected Cross-site Scripting. Delta Electronics, INC. It is used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency. Delta Electronics DIAEnergie suffers from a cross-site scripting vulnerability caused by improper validation of user-supplied input. No detailed vulnerability details are currently available

Trust: 2.16

sources: NVD: CVE-2025-57701 // JVNDB: JVNDB-2025-012070 // CNVD: CNVD-2025-22956

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2025-22956

AFFECTED PRODUCTS

vendor:deltawwmodel:diaenergiescope:ltversion:1.11.01.001

Trust: 1.0

vendor:deltamodel:diaenergiescope: - version: -

Trust: 0.8

vendor:deltamodel:diaenergiescope:eqversion:1.11.01.001

Trust: 0.8

vendor:deltamodel:diaenergiescope:eqversion: -

Trust: 0.8

vendor:deltamodel:electronics diaenergiescope:lteversion:<=1.11.00.002

Trust: 0.6

sources: CNVD: CNVD-2025-22956 // JVNDB: JVNDB-2025-012070 // NVD: CVE-2025-57701

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2025-57701
value: MEDIUM

Trust: 1.0

759f5e80-c8e1-4224-bead-956d7b33c98b: CVE-2025-57701
value: MEDIUM

Trust: 1.0

NVD: CVE-2025-57701
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2025-22956
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2025-22956
severity: MEDIUM
baseScore: 6.4
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2025-57701
baseSeverity: MEDIUM
baseScore: 6.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
exploitabilityScore: 2.8
impactScore: 2.7
version: 3.1

Trust: 1.0

NVD: CVE-2025-57701
baseSeverity: MEDIUM
baseScore: 6.1
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: CNVD: CNVD-2025-22956 // JVNDB: JVNDB-2025-012070 // NVD: CVE-2025-57701 // NVD: CVE-2025-57701

PROBLEMTYPE DATA

problemtype:CWE-79

Trust: 1.0

problemtype:Cross-site scripting (CWE-79) [ others ]

Trust: 0.8

sources: JVNDB: JVNDB-2025-012070 // NVD: CVE-2025-57701

PATCH

title:Patch for Delta Electronics DIAEnergie Cross-Site Scripting Vulnerability (CNVD-2025-22956)url:https://www.cnvd.org.cn/patchInfo/show/738751

Trust: 0.6

sources: CNVD: CNVD-2025-22956

EXTERNAL IDS

db:NVDid:CVE-2025-57701

Trust: 3.2

db:JVNDBid:JVNDB-2025-012070

Trust: 0.8

db:CNVDid:CNVD-2025-22956

Trust: 0.6

sources: CNVD: CNVD-2025-22956 // JVNDB: JVNDB-2025-012070 // NVD: CVE-2025-57701

REFERENCES

url:https://filecenter.deltaww.com/news/download/doc/delta-pcsa-2025-00012_diaenergie%20cross-site%20scripting%20vulnerabilities.pdf

Trust: 2.4

url:https://nvd.nist.gov/vuln/detail/cve-2025-57701

Trust: 0.8

sources: CNVD: CNVD-2025-22956 // JVNDB: JVNDB-2025-012070 // NVD: CVE-2025-57701

SOURCES

db:CNVDid:CNVD-2025-22956
db:JVNDBid:JVNDB-2025-012070
db:NVDid:CVE-2025-57701

LAST UPDATE DATE

2025-10-01T23:19:20.167000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2025-22956date:2025-09-29T00:00:00
db:JVNDBid:JVNDB-2025-012070date:2025-08-22T03:14:00
db:NVDid:CVE-2025-57701date:2025-08-21T14:32:01.350

SOURCES RELEASE DATE

db:CNVDid:CNVD-2025-22956date:2025-09-29T00:00:00
db:JVNDBid:JVNDB-2025-012070date:2025-08-22T00:00:00
db:NVDid:CVE-2025-57701date:2025-08-18T07:15:29.217