Vulnerability details
CVE-2025-53757
Digisol XPON ONU Wi-Fi Router
Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router
CVSS 4.0
8.7High
Official description
This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session cookies transmitted over an unsecure HTTP connection. Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information from the targeted device.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.7High | 4.0 | CVEProject cvelistV5 (CNA) (CERT-In) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Digisol | XPON ONU Wi-Fi Router (DG-GR6821AC) | V3.2.XX | CVEProject cvelistV5 (CNA) |
References and advisories
1- https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0147 third-party-advisory
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-07-16
- Last updated
- 2025-07-16
- State
- Published
- Assigner (CNA)
- CERT-In
Exploit prediction (EPSS)
0.32%
Probability of exploitation in 30 days
25.1%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-614Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
- CWE-1004Sensitive Cookie Without 'HttpOnly' Flag