Skip to content
OpenAdvisories
Critical · 9.8 Scanner template CVE-2025-28242 EUVD-2025-11885GHSA-hfrv-r3rc-g4p6

Improper session management in the /login_ok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack.

Published Apr 18, 2025 · Updated Apr 22, 2025 · Assigned by mitre

Description

Improper session management in the /login_ok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack.

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References