Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2025-4904— D-Link DI-7003GV2 webgl.data sub_41F0FC information disclosure

Quick assessment

Affected

D-Link DI-7003GV2

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

D-Link DI-7003GV2是中国友讯（D-Link）公司的一款路由器。 D-Link DI-7003GV2 24.04.18D1 R(68125)版本存在访问控制错误漏洞，该漏洞源于文件/H5/webgl.data函数sub_41F0FC处理不当，可能导致信息泄露。

CVSS 5.3 · Medium EPSS 1.45% · P71 Updated May 19, 2025

Possible ATT&CK Techniques 2 AI

T1005 · Data from Local System T1213 · Data from Information Repositories

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-4904

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

D-Link DI-7003GV2 webgl.data sub_41F0FC information disclosure

Source: CVE Program / CVE List V5

Vulnerability Description

A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic. This vulnerability affects the function sub_41F0FC of the file /H5/webgl.data. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

信息暴露

Source: CVE Program / CVE List V5

Vulnerability Title

D-Link DI-7003GV2 访问控制错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
D-Link	DI-7003GV2	24.04.18D1 R(68125)	-

II. Public POCs for CVE-2025-4904

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2025-4904

请登录查看更多情报信息。

News Coverage for CVE-2025-4904 (1)

🔗 my_vulns/Dlink/Di-7003GV2/webgl_data.md at main · at0de/my_vulns · GitHub Read full article exploit

Vendor Pages for CVE-2025-4904 (1)

Smart Home, SMB and Enterprise solutions | D-Link product

https://www.cve.org/CVERecord?id=CVE-2025-4904

Same Patch Batch · D-Link · 2025-05-19 · 3 CVEs total

CVE-2025-4902	5.3 MEDIUM	D-Link DI-7003GV2 versionupdate.data sub_48F4F0 information disclosure
CVE-2025-4903	5.3 MEDIUM	D-Link DI-7003GV2 webgl.asp sub_41F4F0 unverified password change

IV. Related Vulnerabilities

Same product: DI-7003GV2

Same vendor: D-Link

Same weakness: CWE-200

V. Comments for CVE-2025-4904

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2025-4904— D-Link DI-7003GV2 webgl.data sub_41F0FC information disclosure

Quick assessment

Possible ATT&CK Techniques 2 AI

I. Basic Information for CVE-2025-4904

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2025-4904

III. Intelligence Information for CVE-2025-4904

News Coverage for CVE-2025-4904 (1)

Vendor Pages for CVE-2025-4904 (1)

Same Patch Batch · D-Link · 2025-05-19 · 3 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2025-4904

Leave a comment