CVE-2025-53758

MediumCVSS 5.1/10Last modified Jun 17, 2026

Description

This vulnerability exists in Digisol DG-GR6821AC Router due to use of default admin credentials at its web management interface. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the hardcoded default credentials stored in the firmware of the targeted device.

Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the targeted device.

Metrics

CVSS 4.0 5.1/10CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-312

Affected software

No affected versions have been published.

Timeline

Published
Jul 16, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-537597.8Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-53769.8A vulnerability was found in SourceCodester Health Center Patient Record Management System 1.0. It has been declared as critical. Affected bCVE-2025-537607.1Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2025-537617.8Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.CVE-2025-537629.9Permissive list of allowed inputs in Microsoft Purview allows an authorized attacker to elevate privileges over a network.CVE-2025-537639.8Improper access control in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.CVE-2025-537655.5Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information localCVE-2025-537669.8Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.CVE-2025-5376710.0Azure OpenAI Elevation of Privilege VulnerabilityCVE-2025-537687.8Use after free in Xbox allows an authorized attacker to elevate privileges locally.CVE-2025-537695.5External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally.CVE-2025-53776.1A vulnerability was found in Astun Technology iShare Maps 5.4.0. It has been rated as problematic. Affected by this issue is some unknown fu
CVE-2025-53758: Medium severity, CVSS 5.1 | Vulnix