Information Disclosure Vulnerability in D-Link DI-7003GV2 Configuration Handler
CVE-2025-4750
Key Information:
- Vendor
D-link
- Status
- Vendor
- CVE Published:
- 16 May 2025
Badges
What is CVE-2025-4750?
A vulnerability exists in the D-Link DI-7003GV2 related to improper handling of the /H5/get_version.data file within the Configuration Handler. This flaw allows remote attackers to gain unauthorized access to sensitive information, thereby potentially exposing confidential data. The publicly disclosed exploit can be leveraged to initiate attacks from a distance, emphasizing the need for immediate action to mitigate the associated risks.
Affected Version(s)
DI-7003GV2 24.04.18D1 R(68125)
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved