CVE Vulnerabilities

CVE-2025-48461

Predictable from Observable State

Published: Jun 24, 2025 | Modified: Jul 09, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset passwords.

Weakness

A number or object is predictable based on observations that the attacker can make about the state of the system or network, such as time, process ID, etc.

Affected Software

NameVendorStart VersionEnd Version
Wise-4060lan_firmwareAdvantech- (including)- (including)

Potential Mitigations

References