Lucene search
K

CVE-2025-4903

๐Ÿ—“๏ธย 19 May 2025ย 00:31:04Reported byย VulDBTypeย 
cve
ย cve
๐Ÿ”—ย web.nvd.nist.gov๐Ÿ‘ย 33ย Views๐ŸŒ WEB

Critical vulnerability in D-Link DI-7003GV2 allows unverified password changes remotely.

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2025-4903
19 May 202501:37
โ€“circl
CNNVD
D-Link DI-7003GV2 ๅฎ‰ๅ…จๆผๆดž
19 May 202500:00
โ€“cnnvd
CNVD
Unspecified Vulnerability in D-Link DI-7003GV2
22 May 202500:00
โ€“cnvd
Cvelist
CVE-2025-4903 D-Link DI-7003GV2 webgl.asp sub_41F4F0 unverified password change
19 May 202500:31
โ€“cvelist
EUVD
EUVD-2025-28278
3 Oct 202520:07
โ€“euvd
NVD
CVE-2025-4903
19 May 202501:15
โ€“nvd
OSV
CVE-2025-4903
19 May 202501:15
โ€“osv
Positive Technologies
PT-2025-21871 ยท D Link ยท D-Link Di-7003Gv2
18 May 202500:00
โ€“ptsecurity
RedhatCVE
CVE-2025-4903
21 May 202500:46
โ€“redhatcve
Vulnrichment
CVE-2025-4903 D-Link DI-7003GV2 webgl.asp sub_41F4F0 unverified password change
19 May 202500:31
โ€“vulnrichment
Rows per page
NVD
Node
dlinkdi-7003g_firmwareMatch24.04.18d1_r(68125)
AND
[
  {
    "vendor": "D-Link",
    "product": "DI-7003GV2",
    "versions": [
      {
        "version": "24.04.18D1 R(68125)",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
tggl_portquery paramH5/webgl.asp?tggl_port=0&remote_management=0&http_passwd=game&exec_service=admin-restartUnverified password change vulnerability allowing remote attacker to trigger admin service restart with unverified password, enabling unauthorized password change/execution.CWE-620,ย CWE-640
remote_managementquery paramH5/webgl.asp?tggl_port=0&remote_management=0&http_passwd=game&exec_service=admin-restartUnverified password change vulnerability allowing remote attacker to trigger admin service restart with unverified password, enabling unauthorized password change/execution.CWE-620,ย CWE-640
http_passwdquery paramH5/webgl.asp?tggl_port=0&remote_management=0&http_passwd=game&exec_service=admin-restartUnverified password change vulnerability allowing remote attacker to trigger admin service restart with unverified password, enabling unauthorized password change/execution.CWE-620,ย CWE-640
exec_servicequery paramH5/webgl.asp?tggl_port=0&remote_management=0&http_passwd=game&exec_service=admin-restartUnverified password change vulnerability allowing remote attacker to trigger admin service restart with unverified password, enabling unauthorized password change/execution.CWE-620,ย CWE-640

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

27 May 2025 16:29Current
5.4Medium risk
Vulners AI Score5.4
CVSS 3.15.3 - 7.5
CVSS 25
CVSS 46.9
CVSS 35.3
EPSS0.01693
SSVC
33