Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-48461
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Weak Session Cookie Entropy
Source: NVD (National Vulnerability Database)
Vulnerability Description
Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset passwords.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Advantech多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Advantech WISE-4060LAN是中国台湾研华（Advantech）公司的一个工业自动化控制器。 Advantech多款产品存在安全漏洞，该漏洞源于会话cookie可预测导致暴力破解和账户接管。以下产品受到影响：WISE-4010LAN、WISE-4050LAN和WISE-4060LAN。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
AdvantechAdvantech Wireless Sensing and Equipment (WISE) A2.01 B00 -
II. Public POCs for CVE-2025-48461
#POC DescriptionSource LinkShenlong Link
1Nonehttps://github.com/joelczk/CVE-2025-48461POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2025-48461
Please Login to view more intelligence information
IV. Related Vulnerabilities
Same product: Advantech Wireless Sensing and Equipment (WISE)
Same vendor: Advantech
V. Comments for CVE-2025-48461

No comments yet

Leave a comment