Description
Delta Electronics COMMGR v1 and v2 uses insufficiently randomized values to generate session IDs (CWE-338). An attacker could easily brute force a session ID and load and execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Delta Electronics | COMMGR | — | — |
Advisories 1
- ICSA-25-105-07 Delta Electronics COMMGR (Update A) CISA ICS & IT advisories · Sep 4, 2025