CVE-2025-53757: fallo de gravedad alta en Digisol XPON ONU Wi-Fi Router (DG-GR6821AC)
Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.7epss 0.3%
This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session cookies transmitted over an unsecure HTTP connection.
Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information from the targeted device.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Digisol · XPON ONU Wi-Fi Router (DG-GR6821AC)CVEs relacionadas — Digisol XPON ONU Wi-Fi Router (DG-GR6821AC)
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-53756HIGHCleartext Transmission Vulnerability in Digisol DG-GR6821AC RouterEPSS 0.3%CVE-2025-53754MEDIUMHard-coded Credentials Vulnerability in Digisol DG-GR6821AC RouterEPSS 0.2%CVE-2025-53758MEDIUMDefault Credential Vulnerability in Digisol DG-GR6821AC RouterEPSS 0.1%CVE-2025-53755MEDIUMCleartext Storage Vulnerability in Digisol DG-GR6821AC RouterEPSS 0.1%