PT-2025-47493 · Dasan · Dasan Switch Ds2924

Hiky8 · Published 2025-11-19 · Updated 2025-11-20 · CVE-2025-63206

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dasan Switch DS2924 versions 1.01.18 and 1.02.00

Description An authentication bypass exists in the web based interface of Dasan Switch DS2924. Successful exploitation allows attackers to gain escalated privileges by storing specially crafted cookies in the web browser.

Recommendations Update firmware to a version that addresses this issue. As a temporary workaround, clear browser cookies after each use of the web interface.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-63206

Affected Products

Dasan Switch Ds2924

References · 7

• 🔥 https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63206_Dasan%20Switch%20DS2924%20Authentication%20Bypass · Exploit
• https://osv.dev/vulnerability/CVE-2025-63206 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-63206 · Security Note
• https://twitter.com/CVEnew/status/1991409493536587861 · Twitter Post
• https://t.me/cveNotify/143474 · Telegram Post
• http://dasansmc.com · Note
• https://t.me/CVEtracker/37766 · Telegram Post