CVE-2025-53757

Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router

State: Published
Severity: 8.7 High
Published: Jul 16, 2025
Updated: Jul 16, 2025
Reserved: Jul 9, 2025

Description

This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session cookies transmitted over an unsecure HTTP connection.

Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information from the targeted device.

Scores

CVSS	Score	Vector	Source
4.0	8.7 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	CERT-In

Weaknesses

CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CWE-1004 Sensitive Cookie Without 'HttpOnly' Flag

Affected Products

Product	Versions
XPON ONU Wi-Fi Router (DG-GR6821AC)Digisol	V3.2.XXAffected

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0147third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.