PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-12819 Delta Electronics CVE debrief

The Delta Electronics DVP12SE PLC is vulnerable due to an exposed Modbus TCP service without authentication or access control. This allows unauthorized read and write access to coils, holding registers, operational memory, relay states, and process control functions. The vulnerability affects operators of Delta Electronics DVP12SE PLC devices, industrial control system administrators, and cybersecurity teams responsible for protecting critical infrastructure. Evidence is based on CISA's CSAF advisory and CVE details. The affected product deployments should be reviewed for exposure, and defenders should verify the PLC configurations, network connectivity, and existing security controls. Additional information may be required to fully assess the vulnerability and implement effective mitigations. Operators of Delta Electronics DVP12SE PLC devices should prioritize applying vendor-recommended mitigations and compensating controls due to the critical severity and potential for unauthorized access. These stakeholders should review the PLC configurations, assess the vulnerability, and implement effective security measures to prevent exploitation. Additionally, they should consider the potential operational impact and develop strategies to minimize disruptions to industrial processes.

Vendor
Delta Electronics
Product
DVP12SE PLC
CVSS
CRITICAL 9.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-30
Original CVE updated
2026-06-30
Advisory published
2026-06-30
Advisory updated
2026-06-30

Who should care

Operators of Delta Electronics DVP12SE PLC devices, industrial control system administrators, and cybersecurity teams responsible for protecting critical infrastructure should prioritize applying vendor-recommended mitigations and compensating controls due to the critical severity and potential for unauthorized access. These stakeholders should review the PLC configurations, assess the vulnerability, and implement effective security measures to prevent exploitation. Additionally, they should consider the potential operational impact and develop strategies to minimize disruptions to industrial processes.

Technical summary

The Delta Electronics DVP12SE PLC is vulnerable due to an exposed Modbus TCP service without authentication or access control. This allows unauthorized read and write access to coils, holding registers, operational memory, relay states, and process control functions. The vulnerability affects operators of Delta Electronics DVP12SE PLC devices, industrial control system administrators, and cybersecurity teams responsible for protecting critical infrastructure. The exposed service may allow attackers to manipulate PLC functions, potentially disrupting industrial processes.

Defensive priority

Operators of Delta Electronics DVP12SE PLC devices should prioritize applying vendor-recommended mitigations and compensating controls due to the critical severity and potential for unauthorized access.

Recommended defensive actions

  • Enable IP Filter feature on DVP12SE PLC
  • Set up PLC password protection
  • Implement network isolation and firewall protection
  • Restrict access to trusted IP addresses
  • Refer to Delta Electronics' advisory page for updates

Evidence notes

The Delta Electronics DVP12SE PLC exposes a Modbus TCP service without authentication or access control, allowing unauthorized interaction with security-sensitive PLC functions. Evidence is based on CISA's CSAF advisory and CVE details. The affected product deployments should be reviewed for exposure, and defenders should verify the PLC configurations, network connectivity, and existing security controls. Additional information may be required to fully assess the vulnerability and implement effective mitigations.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-06-30T06:00:00.000Z and has not been modified since then.