CVE-2019-25250

MEDIUM

Devolo dLAN 500 AV Wireless+ 3.1.0-1 Cross-Site Request Forgery

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2019-25250 has a selected CVSS score of 5.1 (medium); EIP currently links 1 catalogued exploit.

Description

Devolo dLAN 500 AV Wireless+ 3.1.0-1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation. Attackers can craft malicious web pages that trigger unauthorized configuration changes by exploiting predictable URL actions when a logged-in user visits the site.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 24, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

dLAN 550 duo+ Starter Kit

Browse devolo AG / dLAN 550 duo+ Starter Kit
CVE List500 AV Wireless+ 3.1.0-1affected

Proofs of concept

1

Catalogued exploits

ExploitDBdevolo dLAN 550 duo+ Starter Kit - Cross-Site Request ForgeryExploitDB exploitby smNot analyzed1 file
ExploitDB
PoC details

References

4