CVE-2025-28242

CRITICAL CVSS: 9.8 Published: 2025-04-18 Modified: 2026-06-17

Description

Improper session management in the /login_ok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack.

Affected Platforms

Unknown

Weakness Type

CWE-384

References