Vulnerability in Cp Plus Cp-Xr-De21-S Router
CVE-2025-0479
This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface. A remote attacker could exploit this vulnerability by intercepting data transmissions during an HTTP session on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information and compromise the targeted system.
EPSS: 0.004 (35.2th percentile) — read the EPSS interpretation.
Affected products
- Cp Plus Cp-xr-de21-s Router — versions DE21_S_india_hx806_1.057.043_0023
Weakness classification (CWE)
References
- vdisclose@cert-in.org.in (third-party-advisory)