PT-2025-53336 · Devolo · Devolo Dlan 500 Av Wireless+

Published 2025-12-24 · Updated 2025-12-24 · CVE-2019-25250

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Devolo dLAN 500 AV Wireless+ version 3.1.0-1

Description The software contains a cross-site request forgery issue that enables attackers to perform administrative actions without proper request validation. Attackers can create malicious web pages that initiate unauthorized configuration changes by exploiting predictable URL actions when a logged-in user visits the site.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2019-25250

Affected Products

Devolo Dlan 500 Av Wireless+

References · 5

• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2019-5507.php · Exploit
• 🔥 https://exploit-db.com/exploits/46324 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25250 · Security Note
• https://t.me/CVEtracker/40627 · Telegram Post
• https://devolo.com · Note