VulnerabilityDeferred

CVE-2025-64386

This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session detecting it.

HIGH 7.7EPSS 0.33%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.33%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session detecting it. The web server allows the attacker to reuse an old session JWT token while the legitimate session is active.

CVSS 4.0: 7.7 HIGHCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.33% probability · 26th percentile
CISA KEV: Not listed
Weakness: CWE-613
Source: 50b5080a-775f-442e-83b5-926b5ca517b6

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.