CVE-2025-48461

Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset passwords.

Score

CVSS 3.1 5.0 Medium

Status

Analyzed - 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

Published

2025-06-24

Last modified

2025-06-25

Weaknesses

CWE-341

Affected products

• Advantech Wireless Sensing And Equipment Wise (Advantech)
• Wise-4010lan Firmware (Advantech)
• Wise-4050lan Firmware (Advantech)
• Wise-4060lan Firmware (Advantech)

References

• https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061/