Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2025-48461
PUBLISHED
More InfoOfficial Page
Assigner-CSA
Assigner Org ID-5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
View Known Exploited Vulnerability (KEV) details
Published At-24 Jun, 2025 | 02:02
Updated At-25 Jun, 2025 | 13:23
Rejected At-
▼CVE Numbering Authority (CNA)
Weak Session Cookie Entropy

Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset passwords.

Affected Products
Vendor
Advantech (Advantech Co., Ltd.)Advantech
Product
Advantech Wireless Sensing and Equipment (WISE)
Default Status
unknown
Versions
Affected
  • A2.01 B00
Metrics
VersionBase scoreBase severityVector
3.15.0MEDIUM
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

This vulnerability can be mitigated by enabling the Security Mode, an existing configuration feature available in previous firmware versions. Security Mode restricts access to unsecured web interfaces and disables unnecessary services to reduce attack surfaces. Users and administrators of affected products are strongly advised to enable Security Mode immediately after configuration.

Configurations

Workarounds

Exploits

Credits

finder
Joel Chang Zhi Kai
Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061/
N/A
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Problem Types
TypeCWE IDDescription
CWECWE-341CWE-341 Predictable from Observable State
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Details not found