CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2025-63206

An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware versions 1.01.18 and 1.02.00, allowing attackers to gain escalated privileges via storing crafted cookies in the web browser.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 29.8%

CVSS Severity

CVSS v3 Score 9.8

References

http://dasansmc.com/
https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63206_Dasan%20Switch%20DS2924%20Authentication%20Bypass
https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63206_Dasan%20Switch%20DS2924%20Authentication%20Bypass

Products affected by CVE-2025-63206

Dasannetworks » Ds2924 » Version: N/A

cpe:2.3:h:dasannetworks:ds2924:-
Dasannetworks » Ds2924 Firmware » Version: 1.01.18

cpe:2.3:o:dasannetworks:ds2924_firmware:1.01.18
Dasannetworks » Ds2924 Firmware » Version: 1.02.00

cpe:2.3:o:dasannetworks:ds2924_firmware:1.02.00

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-63206

Products

Pricing

Contact Us