CVE-2013-4732

Published: Jun 30, 2013Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Electronics R189 One-Net EAS device through 2.0-2 uses predictable session ID values, which makes it easier for remote attackers to hijack sessions by sniffing the network. NOTE: VU#662676 states "Monroe Electronics could not reproduce this finding.

Affected (6)

Products: Digital Alert Systems: Dasdec Eas · Monroe Electronics: R189 One Net Eas

Digital Alert Systems

1 product

Dasdec Eas

Monroe Electronics

1 product

R189 One Net Eas

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Digital Alert Systems Dasdec Eas	Up to 2.0-2
Digital Alert Systems Dasdec Eas	Version 2.0-0
Digital Alert Systems Dasdec Eas	Version 2.0-1
Monroe Electronics R189 One Net Eas	Up to 2.0-2
Monroe Electronics R189 One Net Eas	Version 2.0-0
Monroe Electronics R189 One Net Eas	Version 2.0-1