CVE-2025-6932

Katalog CVE

CVSS 3.7 · Low EPSS 1,3%

Kerentanan Credentials Management Errors pada dlink dcs-7517 firmware. Skor CVSS 3.1 3.7 (Low) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability, which was classified as problematic, was found in D-Link DCS-7517 up to 2.02.0. This affects the function g_F_n_GenPassForQlync of the file /bin/httpd of the component Qlync Password Generation Handler. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Rincian

Terbit di NVD

30 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.7 (Low), sumber vuldb.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-255: Credentials Management Errors
CWE-259: Use of Hard-coded Password

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 69,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://cdn2.v50to.cc/dlink/DCS-7517_B1_FW_v2.02.01/report_2.pdf exploit · advisory pihak ketiga
• https://vuldb.com/?id.314445 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.605595 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.314445 permissions required · vdb entry
• https://www.dlink.com/ product