{"id":"CVE-2025-1104","aliases":["EUVD-2025-2006","GHSA-cg43-3q5j-mwp7"],"status":"published","title":"D-Link DHP-W310AV authentication spoofing","description":"A vulnerability has been found in D-Link DHP-W310AV 1.04 and classified as critical. This vulnerability affects unknown code. The manipulation leads to authentication bypass by spoofing. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.02992,"percentile":0.87521,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287","CWE-290"],"published":"2025-02-07T16:31:04Z","modified":"2026-06-17T08:38:23Z","products":[{"vendor":"d-link","product":"dhp-w310av"},{"vendor":"dlink","product":"dhp-w310av_firmware"}],"references":[{"url":"https://vuldb.com/?id.294934","tags":["vdb-entry","Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/?ctiid.294934","tags":["signature","permissions-required","Permissions Required","Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/?submit.489958","tags":["third-party-advisory","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/kn1g78/cve/blob/main/dlink.md","tags":["exploit","Exploit","Third Party Advisory"]},{"url":"https://www.dlink.com/","tags":["product","Product"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1104"},{"url":"https://www.dlink.com"},{"url":"https://github.com/advisories/GHSA-cg43-3q5j-mwp7"}],"sources":{"cve":[{"id":"CVE-2025-1104","title":"D-Link DHP-W310AV authentication spoofing","description":"A vulnerability has been found in D-Link DHP-W310AV 1.04 and classified as critical. This vulnerability affects unknown code. The manipulation leads to authentication bypass by spoofing. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2025-02-07T16:31:04.664Z","modified":"2025-02-07T16:41:57.418Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"cna"},{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"cna"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","assessor":"cna"}],"cwes":["CWE-290","CWE-287"],"updated_at":"2026-11-02T14:32:49.824855Z"}],"euvd":[{"id":"EUVD-2025-2006","description":"A vulnerability has been found in D-Link DHP-W310AV 1.04 and classified as critical. This vulnerability affects unknown code. The manipulation leads to authentication bypass by spoofing. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2025-02-07T16:31:04Z","modified":"2025-02-07T16:41:57Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-03T00:04:02.347135Z"}],"ghsa":[{"id":"GHSA-cg43-3q5j-mwp7","title":"A vulnerability has been found in D-Link DHP-W310AV 1.04 and classified as critical. This...","description":"A vulnerability has been found in D-Link DHP-W310AV 1.04 and classified as critical. This vulnerability affects unknown code. The manipulation leads to authentication bypass by spoofing. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2025-02-07T18:31:23Z","modified":"2025-05-21T18:34:23Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"cwes":["CWE-287","CWE-290"],"updated_at":"2026-11-02T15:02:23.604118Z"}],"nvd":[{"id":"CVE-2025-1104","description":"A vulnerability has been found in D-Link DHP-W310AV 1.04 and classified as critical. This vulnerability affects unknown code. The manipulation leads to authentication bypass by spoofing. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2025-02-07T17:15:31.477Z","modified":"2026-06-17T08:38:23.563Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"secondary"}],"cwes":["CWE-287","CWE-290"],"updated_at":"2026-11-02T14:10:50.916773Z"}]}}