Improper Authentication Vulnerability in D-Link DI-7003GV2 Router
CVE-2025-4755
Key Information:
- Vendor
D-link
- Status
- Vendor
- CVE Published:
- 16 May 2025
Badges
What is CVE-2025-4755?
The D-Link DI-7003GV2 router has a vulnerability in its netconfig.asp function, specifically sub_497DE4, which allows for improper authentication. This flaw permits unauthorized remote access to the device, potentially allowing attackers to manipulate settings or retrieve sensitive information. It is critical for users to review their device security configurations and update to the latest firmware to mitigate risks associated with this vulnerability.
Affected Version(s)
DI-7003GV2 24.04.18D1 R(68125)
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved