CVE-2025-6931

Katalog CVE

CVSS 7.4 · High EPSS 2,2%

Kerentanan Use of Insufficiently Random Values pada dlink dcs-6517 firmware, dlink dcs-7517 firmware. Skor CVSS 3.1 7.4 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability classified as problematic was found in D-Link DCS-6517 and DCS-7517 up to 2.02.0. Affected by this vulnerability is the function generate_pass_from_mac of the file /bin/httpd of the component Root Password Generation Handler. The manipulation leads to insufficient entropy. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Rincian

Terbit di NVD

30 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.4 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-330: Use of Insufficiently Random Values
CWE-331: Insufficient Entropy

EPSS (30 hari)

2,2% peluang dieksploitasi; lebih tinggi dari 82,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://cdn2.v50to.cc/dlink/DCS-6517B1_FW_v2.02.01/report_3.pdf exploit · advisory pihak ketiga
• http://cdn2.v50to.cc/dlink/DCS-7517_B1_FW_v2.02.01/report_1.pdf exploit · advisory pihak ketiga
• https://vuldb.com/?id.314443 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.605592 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.605593 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.605596 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.314443 permissions required · vdb entry
• https://www.dlink.com/ product