Medium severity · published May 16, 2025
CVE-2025-4750
D-Link DI-7003GV2 Configuration get_version.data information disclosure
5.3
CVSS
1.2%
EPSS
No
On KEV
Description
A vulnerability, which was classified as problematic, has been found in D-Link DI-7003GV2 24.04.18D1 R(68125). This issue affects some unknown processing of the file /H5/get_version.data of the component Configuration Handler. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
DI-7003GV2 · D-Link
24.04.18D1 R(68125) · source: vendor
DF
Di-7003g Firmware · Dlink
24.04.18d1_r(68125) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-4750
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-4750
Exploit
https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/get_version.md
Permissions Required
https://vuldb.com/?ctiid.309053
Permissions Required
https://vuldb.com/?id.309053
Permissions Required
https://vuldb.com/?submit.571069
Product
https://www.dlink.com/
More from DI-7003GV2
7.5
CVE-2025-4903
D-Link DI-7003GV2 webgl.asp sub_41F4F0 unverified password change
7.5
CVE-2025-4902
D-Link DI-7003GV2 versionupdate.data sub_48F4F0 information disclosure
7.5
CVE-2025-4756
D-Link DI-7003GV2 restart.asp denial of service
7.5
CVE-2025-4751
D-Link DI-7003GV2 index.data information disclosure
7.5
CVE-2025-4749
D-Link DI-7003GV2 Factory Reset backup.asp sub_4983B0 denial of service