CVE-2025-4859: D-Link DAP-2695 MAC Bypass Settings Page adv_macbypass.php cross site scripting
A vulnerability was found in D-Link DAP-2695 120b36r137ALLen20210528. It has been rated as problematic. This issue affects some unknown processing of the file /advmacbypass.php of the component MAC Bypass Settings Page. The manipulation of the argument fmac leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4859?
CVE-2025-4859 has been rated as problematic.
What component is affected by CVE-2025-4859?
CVE-2025-4859 affects the MAC Bypass Settings Page of the D-Link DAP-2695.
What type of vulnerability is CVE-2025-4859?
CVE-2025-4859 is a cross-site scripting vulnerability related to the f_mac argument.
How can I mitigate CVE-2025-4859?
To mitigate CVE-2025-4859, ensure that you validate and sanitize inputs on the MAC Bypass Settings Page.
Which device is affected by CVE-2025-4859?
CVE-2025-4859 affects the D-Link DAP-2695.