Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.7
CVE-2025-53757: Digisol DG-GR6821AC Router: Sensitive Data Exposure Over HTTP
CVE-2025-53757 · published 1 year ago
Summary
A misconfigured setting on the Digisol DG-GR6821AC Router's web interface allows hackers to intercept sensitive information transmitted over the internet. This could lead to unauthorized access to your router's settings and potentially other connected devices. To fix this, update your router's firmware or contact the manufacturer for assistance.
Original advisory text
This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker coul...
This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session cookies transmitted over an unsecure HTTP connection.
Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information from the targeted device.
Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information from the targeted device.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-614Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CWE-1004Sensitive Cookie Without 'HttpOnly' Flag
Timeline
Published16 Jul 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-53757 · NVD
Track software like this
Free during beta