VULNERABILITY INTELLIGENCE
CVE-2013-6925
CVSS score8.3 HIGH
EPSS probability1.89%
CISA KEVNot currently listed
Published2013-12-17
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:C
Description
The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by predicting a session id value.
Weakness classification
- CWE-330: Use of Insufficiently Random Values
Primary references
- cve@mitre.org — Third Party Advisory, US Government Resource
- cve@mitre.org — Broken Link, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Vendor Advisory