VULNERABILITY INTELLIGENCE

CVE-2025-63206

CVSS score9.8 CRITICAL
EPSS probability0.57%
CISA KEVNot currently listed
Published2025-11-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware versions 1.01.18 and 1.02.00, allowing attackers to gain escalated privileges via storing crafted cookies in the web browser.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-306

Primary references