Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2025-53419 Details

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Delta Electronics COMMGR has Code Injection vulnerability.

CVSS 3.x Severity and Vector Strings:

CNA: DeltawwCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00014_COMMGR%20Stack-based%20Buffer%20Overflow%20and%20Code%20Injection%20Vulnerabilities.pdf	Deltaww	AdvisoryBundleRemedyVendor

CWE-ID	CWE Name	Source
CWE-94	Improper Control of Generation of Code ('Code Injection')	Deltaww

Product	Versions
Delta Electronics COMMGR	<= 2.9.0 (semver)
CPE cpe:2.3:a:deltaww:commgr:::::::: Remediation Upgrade: 2.10.0moderate efforthttps://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&q=COMMGR&sort_expr=cdate&sort_dir=DESC Mitigation:low effort Do not expose control systems and equipment to the Internet. Mitigation:low effort Place systems and devices behind a firewall and isolate them from the business network. Mitigation:low effort Use a secure access method, such as a virtual private network (VPN), when remote access is required.

Product

Versions

Delta Electronics COMMGR

<= 2.9.0 (semver)

Upgrade: 2.10.0moderate efforthttps://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&q=COMMGR&sort_expr=cdate&sort_dir=DESC
Mitigation:low effort
Do not expose control systems and equipment to the Internet.
Mitigation:low effort
Place systems and devices behind a firewall and isolate them from the business network.
Mitigation:low effort
Use a secure access method, such as a virtual private network (VPN), when remote access is required.

3 change records found show changes

QUICK INFO