CVE-2025-14528: D-Link DIR-803 Configuration getcfg.php information disclosure
A vulnerability was detected in D-Link DIR-803 up to 1.04. Impacted is an unknown function of the file /getcfg.php of the component Configuration Handler. The manipulation of the argument AUTHORIZEDGROUP results in information disclosure. The attack may be performed from remote. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14528?
CVE-2025-14528 has a medium severity level due to its potential for information disclosure.
How do I fix CVE-2025-14528?
To fix CVE-2025-14528, update the D-Link DIR-803 firmware to version 1.05 or later.
What type of vulnerability is CVE-2025-14528?
CVE-2025-14528 is classified as an information disclosure vulnerability.
Can CVE-2025-14528 be exploited remotely?
Yes, CVE-2025-14528 can be exploited remotely by attackers.
What component is affected by CVE-2025-14528?
CVE-2025-14528 affects the Configuration Handler component in the D-Link DIR-803.