Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/11/20 12:21 a.m.•29 views

CVE-2025-63212

GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX600, and LX1000, expose sensitive session identifiers sid in the publicly accessible log file located at /log/Flexiva%20LX.log. An unauthenticated attacker can retrieve valid session IDs and hijack sessions...

6.5CVSS6.9AI score0.00358EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/19 8:15 p.m.•18 views

CVE-2025-63212

GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX600, and LX1000, expose sensitive session identifiers sid in the publicly accessible log file located at /log/Flexiva%20LX.log. An unauthenticated attacker can retrieve valid session IDs and hijack sessions...

6.5CVSS0.00358EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/11/19 12:00 a.m.•6 views

CVE-2025-63212

GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX600, and LX1000, expose sensitive session identifiers sid in the publicly accessible log file located at /log/Flexiva%20LX.log. An unauthenticated attacker can retrieve valid session IDs and hijack sessions...

6.5AI score0.00358EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/19 12:00 a.m.•1 views

CVE-2025-63212: Exposure of Sensitive Information to an Unauthorized Actor

GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX600, and LX1000, expose sensitive session identifiers sid in the publicly accessible log file located at /log/Flexiva%20LX.log. An unauthenticated attacker can retrieve valid session IDs and hijack sessions...

6.5CVSS5.7AI score0.00358EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/19 12:00 a.m.•12 views

GatesAir Flexiva-LX Series 安全漏洞

The GatesAir Flexiva-LX Series is a series of solid-state FM transmitters from GatesAir USA. A security vulnerability exists in the GatesAir Flexiva-LX Series versions 1.0.13 and 2.0 that originates from a publicly accessible log file exposing sensitive session identifiers, which could lead to...

6.5CVSS6.5AI score0.00358EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/11/19 12:00 a.m.•36 views

CVE-2025-63212

GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX600, and LX1000, expose sensitive session identifiers sid in the publicly accessible log file located at /log/Flexiva%20LX.log. An unauthenticated attacker can retrieve valid session IDs and hijack sessions...

0.00358EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/19 12:00 a.m.•20 views

PT-2025-47524

Name of the Vulnerable Software and Affected Versions GatesAir Flexiva-LX versions 1.0.13 and 2.0 GatesAir Flexiva-LX models LX100, LX300, LX600, and LX1000 Description The GatesAir Flexiva-LX devices are affected by an issue where sensitive session identifiers sid are exposed in a publicly...

6.6AI score0.00358EPSS
SaveExploits1References4
Rows per page
Query Builder