CVE-2025-3495

Publication date

2025-04-16 03:10:05

Family

Deltaww

State

PUBLISHED

Description

Delta Electronics COMMGR v1 and v2 uses insufficiently randomized values to generate session IDs (CWE-338). An attacker could easily brute force a session ID and load and execute arbitrary code.