Vulnerability · Published Jul 16, 2025 · Assigned by CERT-In

CVE-2025-53757Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router

High 8.7

In plain English

A high-severity security flaw in XPON ONU Wi-Fi Router (DG-GR6821AC) from Digisol. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).

Severity (CVSS 4.0)8.7High

Exploit odds (30 days)0.3%top 74.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session cookies transmitted over an unsecure HTTP connection. Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information from the targeted device.

Affected products (as reported)

Vendor	Product	Versions
Digisol	XPON ONU Wi-Fi Router (DG-GR6821AC)	V3.2.XX

Weakness: CWE-614, CWE-1004 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0147 third-party-advisory