Description
All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to extract the proprietary "Dingtian Binary" protocol password by sending an unauthenticated GET request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dingtian | DT-R002 | All versions | — |
Advisories 1
- ICSA-25-268-01 Dingtian DT-R002 CISA ICS & IT advisories · Sep 25, 2025
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-268-01 government-resource