← All advisories

Medium severity5.3NVD Advisory· Published Jul 3, 2025· Updated Jun 17, 2026

CVE-2025-27453

CVE-2025-27453

Description

The HttpOnly flag is set to false on the PHPSESSION cookie. Therefore, the cookie can be accessed by other sources such as JavaScript.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Endress+Hauser/Endress+Hauser MEAC300-FNADE4v5
Range: >=0.17.0
Sick.com/PHPSESSION cookiellm-create
Endress/Meac300 Fnade4 Firmware
cpe:2.3:o:endress:meac300-fnade4_firmware:*:*:*:*:*:*:*:*
Range: <=0.16.0

Patches

Vulnerability mechanics

References

6

sick.com/psirtnvdVendor Advisory
www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.jsonnvdVendor Advisory
www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdfnvdVendor Advisory
www.cisa.gov/resources-tools/resources/ics-recommended-practicesnvdUS Government Resource
www.endress.comnvdProduct
www.first.org/cvss/calculator/3.1nvdNot Applicable

News mentions

0

No linked articles in our index yet.