What’s Vulnerable › Vulnerabilities

CVE-2025-4902: D-Link DI-7003GV2 versionupdate.data sub_48F4F0 information disclosure

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 14.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-05-19 · updated 2026-06-17
• Weakness: CWE-200

Description

A vulnerability, which was classified as problematic, has been found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected by this issue is the function sub_48F4F0 of the file /H5/versionupdate.data. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

• D-Link DI-7003GV2: 24.04.18d1_r(68125)

References

• https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/versionupdate.md
• https://vuldb.com/?ctiid.309458
• https://vuldb.com/?id.309458
• https://vuldb.com/?submit.578050
• https://www.dlink.com/
• https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/versionupdate.md

Get alerted when CVE-2025-4902 or the next vulnerability affects your stack