Critical Vulnerabilities in Delta Electronics DIAView Expose Industrial Systems to Attacks

Critical Flaws in Delta Electronics DIAView Demand Immediate Patching

Madrid, Spain – January 19, 2026 – Spain’s National Cybersecurity Institute (INCIBE-CERT) has issued an urgent alert regarding multiple high-severity vulnerabilities in Delta Electronics DIAView software, a widely used industrial automation solution. The flaws, if exploited, could allow threat actors to execute remote code, escalate privileges, or access sensitive data in critical infrastructure environments.

Technical Details of the Vulnerabilities

The vulnerabilities affect DIAView versions prior to 1.2.1.0, with the following critical issues identified:

• CVE-2023-5932: Improper Input Validation (CVSS 9.8) – Allows remote attackers to execute arbitrary code via crafted network packets.
• CVE-2023-5933: Path Traversal (CVSS 8.6) – Enables unauthorized file access and potential data exfiltration.
• CVE-2023-5934: Insecure Deserialization (CVSS 8.1) – Could lead to remote code execution (RCE) or denial-of-service (DoS) conditions.
• CVE-2023-5935: Hardcoded Credentials (CVSS 7.5) – Exposes default credentials, granting unauthorized system access.

These flaws stem from inadequate input sanitization, improper access controls, and insecure coding practices in the DIAView software, which is commonly deployed in manufacturing, energy, and water treatment facilities.

Impact Analysis

Successful exploitation of these vulnerabilities could result in:

• Remote code execution (RCE) on affected systems, enabling full control over industrial processes.
• Unauthorized data access, including sensitive operational and configuration files.
• Disruption of critical services, leading to potential safety hazards in industrial environments.
• Lateral movement within OT networks, amplifying the attack surface.

Given the software’s integration with SCADA and HMI systems, the risks extend beyond data breaches to physical operational disruptions.

Recommended Actions

INCIBE-CERT urges organizations using DIAView to:

1. Apply the latest patch (v1.2.1.0 or later) immediately to mitigate all identified vulnerabilities.
2. Isolate affected systems from untrusted networks until patches are deployed.
3. Monitor for suspicious activity, particularly unusual network traffic or unauthorized access attempts.
4. Review and rotate credentials, ensuring no default or hardcoded passwords remain in use.
5. Conduct a security audit of industrial control systems (ICS) to identify additional exposure points.

Delta Electronics has released a security advisory (link) with patch details and mitigation guidance. Organizations are advised to prioritize updates due to the high severity and active exploitation risks associated with these flaws.

For further details, refer to the INCIBE-CERT advisory.