Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-27450

The Secure attribute is missing on multiple cookies provided by the MEAC300-FNADE4. An attacker can trick a user to establish an unencrypted HTTP connection to the server and intercept the request containing the PHPSESSID cookie.

Published

2025-07-03T12:15:22.817

Last Modified

2025-07-03T15:13:53.147

Status

Awaiting Analysis

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-614
Affected Vendors & Products

-

References