Critical severity9.8NVD Advisory· Published Apr 16, 2025· Updated Apr 15, 2026
CVE-2025-3495
CVE-2025-3495
Description
Delta Electronics COMMGR v1 and v2 uses insufficiently randomized values to generate session IDs (CWE-338). An attacker could easily brute force a session ID and load and execute arbitrary code.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.