4.2
CVE-2025-48462
- EPSS 0.17%
- Veröffentlicht 24.06.2025 02:08:58
- Zuletzt bearbeitet 09.07.2025 15:03:03
- CVE-Watchlists
- Unerledigt
Login Session Exhaustion
Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block other users from logging in, thereby preventing legitimate users from gaining access to the product.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Advantech ≫ Wise-4060lan Firmware Version-
Advantech ≫ Wise-4050lan Firmware Version-
Advantech ≫ Wise-4010lan Firmware Version-
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.17% | 0.067 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4 | 4.2 | 0.5 | 3.6 |
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
|
CWE-770 Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061