EUVD-2025-18987Severity by source
AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted HTTP communication, potentially leading to unauthorised access or data tampering.
Analysis
Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted HTTP communication, potentially leading to unauthorised access or data tampering.
Technical ContextAI
This vulnerability is classified as Cleartext Storage of Sensitive Information (CWE-312).
RemediationAI
Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.
More in Wise 4010lan Firmware
View allA privilege escalation vulnerability (CVSS 9.6) that allows an unauthenticated attacker. Risk factors: public PoC availa
CVE-2025-48466 is a security vulnerability (CVSS 8.1). Risk factors: public PoC available.
Successful exploitation of the vulnerability could allow an attacker to cause repeated reboots, potentially leading to r
A security vulnerability in Successful exploitation of the vulnerability could allow an attacker that (CVSS 6.4) that al
A remote code execution vulnerability (CVSS 5.0) that allows an unauthenticated attacker. Remediation should follow stan
Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block ot
Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scr
Same weakness CWE-312 – Cleartext Storage of Sensitive Information
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today