CVE-2025-4901 D-Link DI-7003GV2 HTTP Endpoint state_view.data sub_41E304 information disclosure

Medium 5.3 Published 18 May 2025 Updated 19 May 2025

An attacker on the local network can access sensitive information via the HTTP endpoint state_view.data in D-Link DI-7003GV2 routers.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-4901?

CVE-2025-4901 is a medium-severity vulnerability in D-Link DI-7003GV2, published on 18 May 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability classified as problematic was found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected by this vulnerability is the function sub_41E304 of the file /H5/state_view.data of the component HTTP Endpoint. The manipulation leads to information disclosure. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used.

Weakness: CWE-284, CWE-200

Which versions are affected by CVE-2025-4901?

It affects 1 product.

Products include Dlink Di-7003g Firmware.

How do I fix CVE-2025-4901?

No fix has been published for CVE-2025-4901 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-4901 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-4901 exists.

Sources

Also known as GHSA-4v3f-4r92-c6v3.