CVE-2025-4901: falha de média gravidade em D-Link DI-7003GV2
D-Link DI-7003GV2 HTTP Endpoint state_view.data sub_41E304 information disclosure
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
35Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 79%
A vulnerability classified as problematic was found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected by this vulnerability is the function sub_41E304 of the file /H5/state_view.data of the component HTTP Endpoint. The manipulation leads to information disclosure. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
D-Link · DI-7003GV2CVEs relacionadas — D-Link DI-7003GV2
No mesmo produto, das mais perigosas para as menos.
CVE-2025-4902MEDIUMD-Link DI-7003GV2 versionupdate.data sub_48F4F0 information disclosureEPSS 14.9%CVE-2025-4755MEDIUMD-Link DI-7003GV2 netconfig.asp sub_497DE4 improper authenticationEPSS 7.8%CVE-2025-4756MEDIUMD-Link DI-7003GV2 restart.asp denial of serviceEPSS 2.0%CVE-2025-4751MEDIUMD-Link DI-7003GV2 index.data information disclosureEPSS 1.8%CVE-2025-4904MEDIUMD-Link DI-7003GV2 webgl.data sub_41F0FC information disclosureEPSS 1.6%CVE-2025-4749HIGHD-Link DI-7003GV2 Factory Reset backup.asp sub_4983B0 denial of serviceEPSS 1.5%