CyberzSOC

Publication detail
← Back to advisories & guidance

ICSA-25-268-01: Dingtian DT-R002 ↗ source

September 25, 2025 CISA ICS Advisory
Source: https://www.cisa.gov/news-events/ics-advisories/icsa-25-268-01

Summary

Successful exploitation of these vulnerabilities could allow an attacker to retrieve credentials without authentication. CVE-2025-10879: All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to retrieve the current user's username without authentication. CVE-2025-10880: All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to extract the proprietary "Dingtian Binary" protocol password by sending an unauthenticated GET request

Advisory Details CISA ICS CSAF feed

Advisory ID
ICSA-25-268-01
Status
Final · version 1
Initial release
2025-09-25
Last revised
2025-09-25
Vendor
Dingtian
Critical infrastructure sectors
Critical Manufacturing
Deployed
Worldwide
Vendor headquarters
China

No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.

Credit: Nicolas Cano, Reid Wightman (Dragos)

Affected products (1)
  • DT-R002 — all versions

From CISA's machine-readable CSAF 2.0 advisory (JSON).

Vulnerabilities as Stated by the Advisory

CVEWeaknessCVSS v3Details
CVE-2025-10879 CWE-522 Insufficiently Protected Credentials 7.5 High All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to retrieve the current user's username without authentication.

Vendor fix: Dingtian has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Dingtian DT-R002 are invited to contact Dingtian customer support for additional information. ↗

Mitigation: The researchers recommend the following to help reduce risk:

Mitigation: Restrict access to HTTP (TCP/80), and the Dingtian Protocol on (UDP/60000) and (UDP/60001).

Affected, fixed & timeline

Affected:

  • DT-R002 all versions
CVE-2025-10880 CWE-522 Insufficiently Protected Credentials 7.5 High All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to extract the proprietary "Dingtian Binary" protocol password by sending an unauthenticated GET request

Vendor fix: Dingtian has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of affected versions of Dingtian DT-R002 are invited to contact Dingtian customer support for additional information. ↗

Mitigation: The researchers recommend the following to help reduce risk:

Mitigation: Restrict access to HTTP (TCP/80), and the Dingtian Protocol on (UDP/60000) and (UDP/60001).

Affected, fixed & timeline

Affected:

  • DT-R002 all versions

Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

CVECVSSAffected
CVE-2025-10879 8.7 High Dingtian DT-R002 All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to retrieve the…
CVE-2025-10880 8.7 High Dingtian DT-R002 All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to extract the …

Named by the advisory itself. Each CVE links to its tracked detail page.

Vendors Named in This Publication

No KEV-catalogued vendors are named in this publication.