Remote Info Disclosure via /install_base.data in D-Link DI-7003GV2 v24.04.18D1
CVE-2025-4752 Published on May 16, 2025

D-Link DI-7003GV2 install_base.data information disclosure
A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /install_base.data. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

NVD

Timeline

Advisory disclosed

VulDB entry created

VulDB entry last update

Weakness Types

What is an Information Disclosure Vulnerability?

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CVE-2025-4752 has been classified to as an Information Disclosure vulnerability or weakness.

What is an Authorization Vulnerability?

The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CVE-2025-4752 has been classified to as an Authorization vulnerability or weakness.


Products Associated with CVE-2025-4752

Want to know whenever a new CVE is published for D-Link Di 7003g Firmware? stack.watch will email you.

 

Affected Versions

D-Link DI-7003GV2 Version 24.04.18D1 R(68125) is affected by CVE-2025-4752

Exploit Probability

EPSS
0.12%
Percentile
30.79%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.