EUVD-2026-63219
GHSA-hvh9-4462-hhv5
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Low-privileged network account required to access logs; session hijack yields full admin control within device boundary; no scope change as impact is contained to the FDS 102 itself.
Primary rating from Vendor (CERTVDE).
CVSS VectorVendor: CERTVDE
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
2DescriptionCVE.org
A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live plaintext session identifiers for authenticated users from downloadable error log archives.
AnalysisAI
Session hijacking in Frauscher Sensortechnik FDS 102 versions 2.13.0 through 2.13.3 allows a remote attacker with a low-privileged account to fully compromise active administrator sessions without knowing the administrator's password. The device writes live plaintext session identifiers for authenticated users into downloadable error log archives (CWE-532), enabling any authenticated low-privileged user to extract and replay admin tokens. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid low-privileged authenticated account on the Frauscher FDS 102 device - this is the specific prerequisite confirmed by the CVSS 4.0 PR:L metric. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.7 accurately reflects the low exploitation barrier: any authenticated low-privileged user can execute this attack over the network with no special conditions beyond having an account on the device. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker holding a low-privileged account on an FDS 102 device in the affected version range waits until or confirms that an administrator session is active, then downloads the error log archive using standard HTTP tools available to their privilege level. The attacker parses the log file, locates the administrator's plaintext session token, and injects it into their own HTTP client or browser, immediately gaining full administrative control of the device without any password knowledge. … |
| Remediation | Consult the CERTVDE advisory VDE-2026-078 at https://www.certvde.com/en/advisories/VDE-2026-078/ for vendor-specific patch guidance - no explicit fixed version number is confirmed in the available data, so the remediated version must be verified directly with Frauscher Sensortechnik or via the advisory. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, immediately restrict access to error log archives on FDS 102 devices-limit downloads to senior administrators only and audit all recent error log downloads for unauthorized access. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Session fixation/expiration weakness in the Frauscher Sensortechnik FDS 102 web interface (versions 2.1.0 through 2.13.3
Unauthenticated file disclosure in the Frauscher FDS 102 Field Detection System web interface exposes sensitive railway
CSRF in the Frauscher FDS 102 web interface (versions 2.0.0 through 2.13.3) allows a low-privileged remote attacker to c
Zip-slip path traversal in Frauscher FDS 102 enables a high-privileged remote attacker to overwrite arbitrary files on t
Remote code execution is achievable on the Frauscher FDS 102 field data server when a high-privileged attacker uploads a
Privilege escalation in Frauscher FDS 102 (versions 2.11.0 through 2.13.3) allows a low-privileged authenticated attacke
User enumeration in the Frauscher FDS 102 railway diagnostic system allows low-privileged remote attackers to retrieve t
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today