Skip to content
CVE PROGRAM SOURCE RECORD5.0 Medium

CVE-2025-48461

Weak Session Cookie Entropy

Description

Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset passwords.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Advantech Advantech Wireless Sensing and Equipment (WISE)

Default version status: unknown

  • A2.01 B00affected

References