D-Link DI-7003GV2 HTTP Endpoint state_view.data sub_41E304 information disclosure
D-Link · DI-7003GV2
A flaw in the HTTP Endpoint component of the D-Link DI-7003GV2 (firmware 24.04.18D1 R(68125)) sits in the function sub_41E304, which handles the file /H5/state_view.data, and allows information disclosure. An attacker on the local network, with no authentication or user interaction required, can exploit it to read sensitive information exposed by that endpoint.
A vulnerability classified as problematic was found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected by this vulnerability is the function sub_41E304 of the file /H5/state_view.data of the component HTTP Endpoint. The manipulation leads to information disclosure. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used.
- Exploited
- Not confirmed
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
Disclosed on 18 May 2025. No public exploit code or confirmed exploitation is recorded.
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.