CVE-2025-57202: XSS

Published Dec 3, 2025

Updated

A stored cross-site scripting (XSS) vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the username field.

Affected Software

3 affected components

AVTECH DGM1104 FullImg

All of the following

AVTECH Dgm1104 Firmware

AVTECH DGM1104

Event History

Dec 3, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-57202?

CVE-2025-57202 is considered a high-severity vulnerability due to its ability to allow execution of arbitrary web scripts or HTML.

How do I fix CVE-2025-57202?

To fix CVE-2025-57202, ensure that input validation is implemented for the username field to prevent the injection of malicious scripts.

What type of vulnerability is CVE-2025-57202?

CVE-2025-57202 is classified as a stored cross-site scripting (XSS) vulnerability.

Which software is affected by CVE-2025-57202?

CVE-2025-57202 affects the AVTECH DGM1104 FullImg device.

Can CVE-2025-57202 impact user data?

Yes, CVE-2025-57202 can potentially compromise user data by executing scripts that steal information or manipulate session data.