← Back

CVE-2025-48461

nvd nist
Published: Jun 24, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.0
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Exploitability: 1.6 / Impact: 3.4
Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4 (Secondary)

Description

Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset passwords.

Affected (3)

Advantech
3 products
Wise 4060lan Firmware
Wise 4050lan Firmware
Wise 4010lan Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wise 4060lan Firmware
All versions
Running on/withPlatform Versions
Advantech
Wise 4060lan
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wise 4050lan Firmware
All versions
Running on/withPlatform Versions
Advantech
Wise 4050lan
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wise 4010lan Firmware
All versions
Running on/withPlatform Versions
Advantech
Wise 4010lan
All versions

Related CWEs

CWE-341
Predictable from Observable State
A number or object is predictable based on observations that the attacker can make about the state of the system or network, such as time, process ID, etc.

References (1)

Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
Third Party Advisory

Timeline

No history available yet.