Stored Cross-Site Scripting in AVTECH SECURITY DGM1104

CVE-2025-57202

What is CVE-2025-57202?

A stored cross-site scripting (XSS) vulnerability exists within the PwdGrp.cgi endpoint of the AVTECH SECURITY DGM1104 product line. This flaw enables attackers to inject malicious scripts into the username field, which can lead to the execution of arbitrary web scripts or HTML on the affected devices. If exploited, this vulnerability could allow unauthorized actions to be performed in the context of the end user, posing significant security risks for users of the DGM1104 devices.

References