What’s Vulnerable › Vulnerabilities

CVE-2025-53757: Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router

• Severity: high (CVSS 8.7 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-07-16 · updated 2026-06-17
• Weakness: CWE-614

Description

This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session cookies transmitted over an unsecure HTTP connection. Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information from the targeted device.

Affected products

• Digisol XPON ONU Wi-Fi Router (DG-GR6821AC): V3.2.XX

References

• https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0147

Get alerted when CVE-2025-53757 or the next vulnerability affects your stack