CVE-2025-53757
Last modified
CVE-2025-53757 is a high-severity vulnerability rated 8.7/10 on the CVSS scale. This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session cookies transmitted over an unsecure HTTP connection. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session cookies transmitted over an unsecure HTTP connection. Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information from the targeted device.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-53757?
How severe is CVE-2025-53757?
How do I fix CVE-2025-53757?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-53751Rejected reason: Not used
- CVE-2025-53752Rejected reason: Not used
- CVE-2025-53753Rejected reason: Not used
- CVE-2025-53754This vulnerability exists in Digisol DG-GR6821AC Router due …5.1
- CVE-2025-53755This vulnerability exists in Digisol DG-GR6821AC Router due …5.1
- CVE-2025-53756This vulnerability exists in Digisol DG-GR6821AC Router due …8.7
- CVE-2025-53758This vulnerability exists in Digisol DG-GR6821AC Router due …5.1
- CVE-2025-53759Use of uninitialized resource in Microsoft Office Excel allo…7.8
- CVE-2025-5376A vulnerability was found in SourceCodester Health Center Pa…9.8
- CVE-2025-53760Server-side request forgery (ssrf) in Microsoft Office Share…7.1
- CVE-2025-53761Use after free in Microsoft Office PowerPoint allows an unau…7.8
- CVE-2025-53762Permissive list of allowed inputs in Microsoft Purview allow…9.9
Are you affected by CVE-2025-53757?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST