Delta Electronics DIAView contains a critical security vulnerability identified as CVE-2025-62582, classified under CWE-306 (Missing Authentication for Critical Function). This vulnerability allows remote attackers to access critical functions without authentication, leading to complete compromise of confidentiality, integrity, and availability. The CVSS 3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), reflecting that the vulnerability is remotely exploitable without privileges or user interaction and results in high impact across all security properties. The affected product version is listed as '0', which likely indicates an unspecified or initial version. No patch or vendor advisory details are provided, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow unauthenticated remote attackers to perform unauthorized actions on DIAView, leading to full compromise of system confidentiality, integrity, and availability. This could result in data breaches, system manipulation, or denial of service. There are currently no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, organizations using DIAView should monitor Delta Electronics' advisories closely for updates. Until a fix is available, consider restricting network access to DIAView instances and applying compensating controls where possible.