CRITICALCVE-2026-27515Published Modified CNA VulnCheck
CVE-2026-27515: Binardat 10G08-0800GSM Network Switch Predictable Session Identifiers
Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session identifiers in the web management interface. An attacker can guess valid session IDs and hijack authenticated sessions.
Metrics
- CVSS v4.0
- 9.3
- Severity
- CRITICAL
- Fixed in
- V300SP10260209
- Affected Products
- 1
Fix available
V300SP10260209
Affected packages
- Binardat Ltd. / 10G08-0800GSM Network Switch< V300SP10260209 (from 0)
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:NReferences