CVEvulnerability

CVE-2025-71057

8.2 HIGH Published 2026-02-26 Modified 2026-07-05 Official page ↗

Status: Deferred
Published: 2026-02-26
Last modified: 2026-07-05
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 8.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Weaknesses: CWE-287, CWE-345, CWE-384

Description

Improper session management in D-Link Wireless N 300 ADSL2+ Modem Router DSL-124 ME_1.00 allows attackers to execute a session hijacking attack via spoofing the IP address of an authenticated user.

Weakness · CWE (3)

CWE-287 Improper Authentication weakness
CWE-345 Insufficient Verification of Data Authenticity weakness
CWE-384 Session Fixation weakness

References

https://github.com/theShinigami/CVE-Disclosures/tree/main/CVE-2025-71057 github.com
https://www.dlink.com/en/security-bulletin/ www.dlink.com

CVE-2025-71057

Description

Related

Weakness · CWE (3)

References