CVE-2025-53757CWE-1004CWE-614

Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router

High · published July 16, 2025

CVSS v4.0
8.7
EPSS
0%
Percentile
23.7
In the wild
Unconfirmed
What it is

This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session cookies transmitted over an unsecure HTTP connection.

Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information from the targeted device.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00320 · 23.7th percentile
Weaknesses
CWE-1004 · Sensitive Cookie Without 'HttpOnly' Flag; CWE-614 · Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Published
2025-07-16T11:25Z
EPSS history
Timeline
  • 16 JUL 11:25Z
    Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router
    cvelistv5