High severity · published May 16, 2025
CVE-2025-4749
D-Link DI-7003GV2 Factory Reset backup.asp sub_4983B0 denial of service
7.5
CVSS
1.5%
EPSS
No
On KEV
Description
A vulnerability classified as critical was found in D-Link DI-7003GV2 24.04.18D1 R(68125). This vulnerability affects the function sub_4983B0 of the file /H5/backup.asp?opt=reset of the component Factory Reset Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
DI-7003GV2 · D-Link
24.04.18D1 R(68125) · source: vendor
DF
Di-7003g Firmware · Dlink
24.04.18d1_r(68125) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-4749
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-4749
Exploit
https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/backup.md
Permissions Required
https://vuldb.com/?ctiid.309052
Third Party Advisory
https://vuldb.com/?id.309052
Third Party Advisory
https://vuldb.com/?submit.571068
Product
https://www.dlink.com/
More from DI-7003GV2
7.5
CVE-2025-4903
D-Link DI-7003GV2 webgl.asp sub_41F4F0 unverified password change
7.5
CVE-2025-4902
D-Link DI-7003GV2 versionupdate.data sub_48F4F0 information disclosure
7.5
CVE-2025-4756
D-Link DI-7003GV2 restart.asp denial of service
7.5
CVE-2025-4751
D-Link DI-7003GV2 index.data information disclosure
6.5
CVE-2025-4901
D-Link DI-7003GV2 HTTP Endpoint state_view.data sub_41E304 information disclosure