CVE-2025-71057
Received Received - Intake
Session Hijacking via IP Spoofing in D-Link DSL-124 Router

Publication date: 2026-02-26

Last updated on: 2026-02-26

Assigner: MITRE

Description
Improper session management in D-Link Wireless N 300 ADSL2+ Modem Router DSL-124 ME_1.00 allows attackers to execute a session hijacking attack via spoofing the IP address of an authenticated user.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-26
Last Modified
2026-02-26
Generated
2026-06-16
AI Q&A
2026-02-26
EPSS Evaluated
2026-06-14
NVD
CVE-2025-71057
EUVD
EUVD-2025-208122
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
d-link wired_n_300_adsl2+_modem_router_dsl-124 1.00
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-384 Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.
CWE-345 The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Detection Guidance

I don't know

Mitigation Strategies

I don't know

Executive Summary

This vulnerability involves improper session management in the D-Link Wireless N 300 ADSL2+ Modem Router DSL-124 ME_1.00. It allows attackers to perform a session hijacking attack by spoofing the IP address of an authenticated user.

Impact Analysis

An attacker exploiting this vulnerability can hijack an authenticated user's session by spoofing their IP address. This can lead to unauthorized access to the router's management interface or network resources, potentially compromising network security and user data.

Compliance Impact

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-71057. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart