Is there a public PoC exploit available for CVE-2025-6931?

Yes, a public proof-of-concept exploit is available for CVE-2025-6931. Prioritise patching immediately. EPSS: 0.1%.

Dcs 7517 Firmware CVE-2025-6931

Q: What is the CVSS score of CVE-2025-6931?

CVE-2025-6931 has a CVSS 4.0 base score of 2.9 (Low). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2025-19592 LOW

Use of Insufficiently Random Values (CWE-330)

2025-06-30 cna@vuldb.com

Information Disclosure D-Link Dcs 7517 Firmware Dcs 6517 Firmware

2.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.9 LOW

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 29, 2026 - 01:11 NVD

3.7 (LOW) 2.9 (LOW)

EUVD ID Assigned

Mar 16, 2026 - 01:25 euvd

EUVD-2025-19592

Analysis Generated

Mar 16, 2026 - 01:25 vuln.today

PoC Detected

Jul 14, 2025 - 17:19 vuln.today

Public exploit code

CVE Published

Jun 30, 2025 - 23:15 cve.org

LOW 2.9

CVE Published

Jun 30, 2025 - 23:15 nvd

LOW 3.7

DescriptionCVE.org

A vulnerability classified as problematic was found in D-Link DCS-6517 and DCS-7517 up to 2.02.0. Affected by this vulnerability is the function generate_pass_from_mac of the file /bin/httpd of the component Root Password Generation Handler. The manipulation leads to insufficient entropy. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

Insufficient entropy in root password generation allows remote attackers to predict administrator credentials on D-Link DCS-6517 and DCS-7517 cameras running firmware up to 2.02.0. The vulnerability arises from the generate_pass_from_mac function, enabling password disclosure via a high-complexity attack. Public exploit code is available, but the products are end-of-life and no longer supported.