Description (CNA)
Delta Electronics COMMGR v1 and v2 uses insufficiently randomized values to generate session IDs (CWE-338). An attacker could easily brute force a session ID and load and execute arbitrary code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Delta Electronics / COMMGR | affected 0 |
CWE
CWE-338
References
- https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00005_COMMGR%20-%20Insufficient%20Randomization%20Authentication%20Bypass_v1.pdf
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-07
ADP enrichment
No English description supplied.
No references supplied.