CVE-2025-28238

Improper session management in Elber REBLE310 Firmware v5.5.1.R , Equipment Model: REBLE310/RX10/4ASI allows attackers to execute a session hijacking attack

Critical · published April 18, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
35.8
In the wild
Unconfirmed
What it is

🔥 A simple session mishap could hand your network over to attackers! With Elber REBLE310 Firmware v5.5.1.R, an improper session management flaw spells serious trouble. ⚠️ Think of it as leaving your car running with the keys inside while you pop into the store — anyone can just hop in and drive away. In this scenario, attackers can exploit the session hijacking vulnerability to pose as legitimate users and take control of your system. The consequences could be absolutely devastating! Attackers could gain unauthorized access to sensitive data, manipulate system settings, or even take complete control of your equipment. This isn’t just a nuisance; it could lead to data breaches and operational chaos.

Put simply

Think of it as leaving your car running with the keys inside while you pop into the store — anyone can just hop in and drive away. In this scenario, attackers can exploit the session hijacking vulnerability to pose as legitimate users and take control of your system. This vulnerability arises from improper session management, allowing attackers to hijack valid user sessions without needing authentication. Essentially, they can impersonate users and leverage their session for malicious purposes.

What to do

The consequences could be absolutely devastating! Attackers could gain unauthorized access to sensitive data, manipulate system settings, or even take complete control of your equipment. This isn’t just a nuisance; it could lead to data breaches and operational chaos. Immediate action is crucial! Upgrade the Elber REBLE310 firmware to version 5.5.2 or later to patch this vulnerability. Additionally, conduct a thorough audit of session management practices to enhance security protocols. You've got this! By following these steps, you'll be well on your way to securing your system and locking down those pesky vulnerabilities! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00426 · 35.8th percentile
Published
2025-04-18T00:00Z
EPSS history
Timeline
  • 18 APR 00:00Z
    Improper session management in Elber REBLE310 Firmware v5.5.1.R , Equipment Model: REBLE310/RX10/4ASI allows attackers to execute a session hijacking attack
    cvelistv5