CVE-2025-14528

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-14528
A vulnerability was detected in D-Link DIR-803 up to 1.04. Impacted is an unknown function of the file /getcfg.php of the component Configuration Handler. The manipulation of the argument AUTHORIZED_GROUP results in information disclosure. The attack may be performed from remote. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-2/DIR-803%20Authentication%20Bypass.md Exploit Third Party Advisory
https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-2/DIR-803%20Authentication%20Bypass.md#poc Exploit Third Party Advisory
https://vuldb.com/?ctiid.335869 Permissions Required VDB Entry
https://vuldb.com/?id.335869 Third Party Advisory VDB Entry
https://vuldb.com/?submit.703150 Third Party Advisory VDB Entry
https://www.dlink.com/ Product
https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-2/DIR-803%20Authentication%20Bypass.md Exploit Third Party Advisory
https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-2/DIR-803%20Authentication%20Bypass.md#poc Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-803_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-803:a1:*:*:*:*:*:*:*
History

15 Dec 2025, 19:33

Type Values Removed Values Added
References () https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-2/DIR-803%20Authentication%20Bypass.md - () https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-2/DIR-803%20Authentication%20Bypass.md - Exploit, Third Party Advisory
References () https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-2/DIR-803%20Authentication%20Bypass.md#poc - () https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-2/DIR-803%20Authentication%20Bypass.md#poc - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.335869 - () https://vuldb.com/?ctiid.335869 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.335869 - () https://vuldb.com/?id.335869 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.703150 - () https://vuldb.com/?submit.703150 - Third Party Advisory, VDB Entry
References () https://www.dlink.com/ - () https://www.dlink.com/ - Product
CPE cpe:2.3:o:dlink:dir-803_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-803:a1:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
First Time Dlink dir-803 Firmware
Dlink
Dlink dir-803

11 Dec 2025, 20:15

Type Values Removed Values Added
References () https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-2/DIR-803%20Authentication%20Bypass.md - () https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-2/DIR-803%20Authentication%20Bypass.md -
References () https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-2/DIR-803%20Authentication%20Bypass.md#poc - () https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-2/DIR-803%20Authentication%20Bypass.md#poc -

11 Dec 2025, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-12-11 17:15

Updated : 2025-12-15 19:33

NVD link : CVE-2025-14528

Mitre link : CVE-2025-14528

CVE.ORG link : CVE-2025-14528

JSON object : View

Products Affected

dlink

  • dir-803
  • dir-803_firmware
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-284

Improper Access Control

NVD-CWE-noinfo