EUVD-2026-63221
GHSA-3j24-9cjq-wm9f
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-facing interface (AV:N) with no privileges or interaction (PR:N/UI:N), but exploitation depends on first obtaining a valid session token, so AC:H; full interface compromise gives C/I/A High.
Primary rating from Vendor (CERTVDE).
CVSS VectorVendor: CERTVDE
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
2DescriptionCVE.org
An unauthenticated remote attacker in possession of a valid session identifier is able to continue using the session after it should have expired. This increases the risk associated with stolen, leaked, shared, or unattended sessions and may enable unauthorized continued access to the FDS web interface.
AnalysisAI
Session fixation/expiration weakness in the Frauscher Sensortechnik FDS 102 web interface (versions 2.1.0 through 2.13.3) allows an attacker holding a valid session identifier to keep using that session after it should have expired, granting continued access to the management interface. Because sessions are not invalidated on the expected schedule, stolen, leaked, shared, or unattended session tokens remain usable well beyond their intended lifetime. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to already possess a valid session identifier for the FDS 102 web interface (reflected as AT:P in the CVSS 4.0 vector) - obtained via a stolen, leaked, shared, or unattended session - and network reachability to that interface. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are mixed but lean toward high-priority for exposed deployments: the CVSS 4.0 base score is 9.2 (Critical) with network attack vector, low complexity, no privileges and no user interaction, and High confidentiality/integrity/availability impact on the vulnerable system. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker obtains a valid FDS 102 session identifier - for example from a shared workstation left logged in, a captured or logged token, or an unattended browser - and, because the server does not enforce the intended expiration, continues issuing authenticated requests to the web interface long after the legitimate user believed the session had ended. With network access to the interface and low attack complexity, the attacker reads and manipulates the diagnostic/management functions under the victim's identity. … |
| Remediation | Consult the CERT@VDE advisory VDE-2026-078 (https://www.certvde.com/en/advisories/VDE-2026-078/) for the vendor's fixed release; the affected range ending at 2.13.3 implies a later 2.13.x or newer build is the remediation, but no vendor-released patch version is independently confirmed in the provided data, so verify the exact fixed version with Frauscher before deploying. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: audit and force-terminate all active sessions on affected FDS 102 devices (versions 2.1.0-2.13.3), implement a temporary maximum session lifetime of 8 hours on the device if configurable, and require immediate administrative re-authentication. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated file disclosure in the Frauscher FDS 102 Field Detection System web interface exposes sensitive railway
Session hijacking in Frauscher Sensortechnik FDS 102 versions 2.13.0 through 2.13.3 allows a remote attacker with a low-
CSRF in the Frauscher FDS 102 web interface (versions 2.0.0 through 2.13.3) allows a low-privileged remote attacker to c
Zip-slip path traversal in Frauscher FDS 102 enables a high-privileged remote attacker to overwrite arbitrary files on t
Remote code execution is achievable on the Frauscher FDS 102 field data server when a high-privileged attacker uploads a
Privilege escalation in Frauscher FDS 102 (versions 2.11.0 through 2.13.3) allows a low-privileged authenticated attacke
User enumeration in the Frauscher FDS 102 railway diagnostic system allows low-privileged remote attackers to retrieve t
Same weakness CWE-613 – Insufficient Session Expiration
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today