CVE-2024-47945

The devices are vulnerable to session hijacking due to insufficiententropy in its session ID generation algorithm. The session IDs arepredictable, with only 32,768 possible values per user, which allowsattackers to pre-generate valid session IDs, leading to unauthorizedaccess to user sessions. This...