← CVE Intelligence

CVE-2025-48461

Weak Session Cookie Entropy PUBLISHED

Description (CNA)

Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset passwords.

Affected (CNA)

Vendor / productVersions
Advantech / Advantech Wireless Sensing and Equipment (WISE)affected A2.01 B00

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.