CVE-2025-53757

HighCVSS 8.7/10Last modified Jun 17, 2026

Description

This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session cookies transmitted over an unsecure HTTP connection.

Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information from the targeted device.

Metrics

CVSS 4.0 8.7/10CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-614CWE-1004

Affected software

No affected versions have been published.

Timeline

Published
Jul 16, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-537585.1This vulnerability exists in Digisol DG-GR6821AC Router due to use of default admin credentials at its web management interface. An attackerCVE-2025-537597.8Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-53769.8A vulnerability was found in SourceCodester Health Center Patient Record Management System 1.0. It has been declared as critical. Affected bCVE-2025-537607.1Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2025-537617.8Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.CVE-2025-537629.9Permissive list of allowed inputs in Microsoft Purview allows an authorized attacker to elevate privileges over a network.CVE-2025-537639.8Improper access control in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.CVE-2025-537655.5Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information localCVE-2025-537669.8Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.CVE-2025-5376710.0Azure OpenAI Elevation of Privilege VulnerabilityCVE-2025-537687.8Use after free in Xbox allows an authorized attacker to elevate privileges locally.CVE-2025-537695.5External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally.
CVE-2025-53757: High severity, CVSS 8.7 | Vulnix