CVE-2025-48461
Weak Session Cookie Entropy
- State
- Published
- Severity
- 5.0 Medium
- Published
- Jun 24, 2025
- Updated
- Jun 25, 2025
- Reserved
- May 22, 2025
Description
Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset passwords.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.0 Medium | CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L | CSA |
Weaknesses
- CWE-341 Predictable from Observable State
Affected Products
| Product | Versions |
|---|---|
Advantech Wireless Sensing and Equipment (WISE)Advantech |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.