CVE-2025-53757 - CVE House
Back to Database
Status published High CVE-2025-53757

Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router

Vulnerability Description

This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session cookies transmitted over an unsecure HTTP connection. Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information from the targeted device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-53757

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • This vulnerability is reported by Shravan Singh from Kavach IoT Security.

References

More from Digisol

View All →
CVE-2025-53758
Default Credential Vulnerability in Digisol DG-GR6821AC Router
Medium 5.1
CVE-2025-53756
Cleartext Transmission Vulnerability in Digisol DG-GR6821AC Router
High 8.7
CVE-2025-53755
Cleartext Storage Vulnerability in Digisol DG-GR6821AC Router
Medium 5.1
CVE-2025-53754
Hard-coded Credentials Vulnerability in Digisol DG-GR6821AC Router
Medium 5.1
CVE-2024-4232
Password Storage in Plaintext Vulnerability in Digisol Router
Medium 5.4

Affected Vendor

Affected Software

XPON ONU Wi-Fi Router (DG-GR6821AC)
Vulnerable Versions:
V3.2.XX

Timeline

Official Publish: July 16th, 2025
Last Modified: July 16th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-614 CWE-1004

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.