PT-2025-48938 · Avtech Security · Dgm1104

Published 2025-12-03 · Updated 2025-12-03 · CVE-2025-57202

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003

Description A stored cross-site scripting (XSS) issue exists in the PwdGrp.cgi endpoint. Attackers can inject a crafted payload into the username field, potentially leading to the execution of arbitrary web scripts or HTML.

Recommendations Sanitize user input for the username field in the PwdGrp.cgi endpoint to prevent the injection of malicious scripts.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-57202

Affected Products

Dgm1104

References · 6

• 🔥 https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2025-57202 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-57202 · Security Note
• https://twitter.com/CVEnew/status/1996253923728843094 · Twitter Post
• http://dmg1104.com · Note
• http://avtech.com · Note
• https://twitter.com/ET_Labs/status/1996348564457582854 · Twitter Post