CVE-2025-4901: fallo de gravedad media en D-Link DI-7003GV2
D-Link DI-7003GV2 HTTP Endpoint state_view.data sub_41E304 information disclosure
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
35Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.3epss 79%
A vulnerability classified as problematic was found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected by this vulnerability is the function sub_41E304 of the file /H5/state_view.data of the component HTTP Endpoint. The manipulation leads to information disclosure. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
D-Link · DI-7003GV2CVEs relacionadas — D-Link DI-7003GV2
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-4902MEDIUMD-Link DI-7003GV2 versionupdate.data sub_48F4F0 information disclosureEPSS 14.9%CVE-2025-4755MEDIUMD-Link DI-7003GV2 netconfig.asp sub_497DE4 improper authenticationEPSS 7.8%CVE-2025-4756MEDIUMD-Link DI-7003GV2 restart.asp denial of serviceEPSS 2.0%CVE-2025-4751MEDIUMD-Link DI-7003GV2 index.data information disclosureEPSS 1.8%CVE-2025-4904MEDIUMD-Link DI-7003GV2 webgl.data sub_41F0FC information disclosureEPSS 1.6%CVE-2025-4749HIGHD-Link DI-7003GV2 Factory Reset backup.asp sub_4983B0 denial of serviceEPSS 1.5%