CVE-2025-4901

medium · 5.3

A vulnerability classified as problematic was found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected by this vulnerability is the function sub_41E304 of the file /H5/state_view.data of the component HTTP Endpoint. The manipulation leads to information disclosure. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used.

5.3

CVSS

77.3%

EPSS (exploit prob.)

100th

EPSS percentile

2025-05-19

Published

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-200CWE-284

Affected products

Vendor	Product	Affected versions
dlink	di-7003g_firmware	24.04.18d1_r(68125)
dlink	di-7003g	v2.d1

Check a specific version with /api/v1/cve/match.

References

https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/state_view.md
https://vuldb.com/?ctiid.309457
https://vuldb.com/?id.309457
https://vuldb.com/?submit.578049
https://www.dlink.com/
https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/state_view.md

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-4901