{"id":"CVE-2025-48462","aliases":["EUVD-2025-18988","GHSA-7qh6-rfpx-934h"],"status":"published","title":"Login Session Exhaustion","description":"Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block other users from logging in, thereby preventing legitimate users from gaining access to the product.","severity":{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00195,"percentile":0.09255,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-770"],"published":"2025-06-24T02:08:58Z","modified":"2026-06-17T09:29:39Z","products":[{"vendor":"advantech","product":"advantech wireless sensing and equipment (wise)"},{"vendor":"advantech","product":"wise-4010lan_firmware"},{"vendor":"advantech","product":"wise-4050lan_firmware"},{"vendor":"advantech","product":"wise-4060lan_firmware"}],"references":[{"url":"https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48462"},{"url":"https://github.com/advisories/GHSA-7qh6-rfpx-934h"}],"sources":{"cve":[{"id":"CVE-2025-48462","title":"Login Session Exhaustion","description":"Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block other users from logging in, thereby preventing legitimate users from gaining access to the product.","status":"published","published":"2025-06-24T02:08:58.607Z","modified":"2025-06-25T13:25:06.014Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:32:41.743125Z"}],"euvd":[{"id":"EUVD-2025-18988","description":"Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block other users from logging in, thereby preventing legitimate users from gaining access to the product.","status":"published","published":"2025-06-24T02:08:58Z","modified":"2025-06-25T13:25:06Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:32:16.964954Z"}],"ghsa":[{"id":"GHSA-7qh6-rfpx-934h","title":"Successful exploitation of the vulnerability could allow an attacker to consume all available...","description":"Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block other users from logging in, thereby preventing legitimate users from gaining access to the product.","status":"published","published":"2025-06-26T21:31:04Z","modified":"2025-06-26T21:31:07Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:02:49.372577Z"}],"nvd":[{"id":"CVE-2025-48462","description":"Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block other users from logging in, thereby preventing legitimate users from gaining access to the product.","status":"published","published":"2025-06-24T03:15:33.753Z","modified":"2026-06-17T09:29:39.547Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:11:14.091082Z"}]}}