CVE-2025-4904: falha de média gravidade em D-Link DI-7003GV2
D-Link DI-7003GV2 webgl.data sub_41F0FC information disclosure
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 1.6%
A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic. This vulnerability affects the function sub_41F0FC of the file /H5/webgl.data. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
D-Link · DI-7003GV2CVEs relacionadas — D-Link DI-7003GV2
No mesmo produto, das mais perigosas para as menos.
CVE-2025-4901MEDIUMD-Link DI-7003GV2 HTTP Endpoint state_view.data sub_41E304 information disclosureEPSS 78.9%CVE-2025-4902MEDIUMD-Link DI-7003GV2 versionupdate.data sub_48F4F0 information disclosureEPSS 14.9%CVE-2025-4755MEDIUMD-Link DI-7003GV2 netconfig.asp sub_497DE4 improper authenticationEPSS 7.8%CVE-2025-4756MEDIUMD-Link DI-7003GV2 restart.asp denial of serviceEPSS 2.0%CVE-2025-4751MEDIUMD-Link DI-7003GV2 index.data information disclosureEPSS 1.8%CVE-2025-4749HIGHD-Link DI-7003GV2 Factory Reset backup.asp sub_4983B0 denial of serviceEPSS 1.5%