CVE-2025-4755

Katalog CVE

CVSS 5.3 · Medium EPSS 7,7%

Kerentanan Improper Authentication pada dlink di-7003g firmware. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R(68125). It has been classified as critical. This affects the function sub_497DE4 of the file /H5/netconfig.asp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Rincian

Terbit di NVD

16 Mei 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

7,7% peluang dieksploitasi; lebih tinggi dari 94,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.309057 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.571073 advisory pihak ketiga · vdb entry
• https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/netconfig.md exploit
• https://vuldb.com/?ctiid.309057 permissions required · vdb entry
• https://www.dlink.com/ product