CVE-2025-28242

Summary

CVE-2025-28242 is a session management vulnerability affecting the /login_ok.htm endpoint in DAEnetIP4 METO v1.25. Attackers can exploit this flaw to hijack active sessions, gaining unauthorized access to user accounts. This vulnerability poses a significant risk, as it allows unauthenticated users to take control of ongoing sessions, potentially leading to data theft or unintended actions. Users are urged to update their systems to a patch released by the vendor to mitigate this risk. Failure to address this issue may result in compromised accounts and unauthorized system access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.