PatchTheCVECVE-2013-4732: The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Elec
CVE-2013-4732 is a high-severity flaw (CVSS 10.0) affecting dasdec eas, r189 one-net eas. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Electronics R189 One-Net EAS device through 2.0-2 uses predictable session ID values, which makes it easier for remote attackers to hijack sessions by sniffing the network. NOTE: VU#662676 states "Monroe Electronics could not reproduce this finding.
Why this priority
- Critical severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 10.0 (High) |
| EPSS exploit chance | 3.0% (top 12%) |
| CISA exploited list | No |
| Weakness | CWE-255 |
| Published | 2013-06-30 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2013-4732?
dasdec eas: upgrade to newer than 2.0-2; r189 one-net eas: upgrade to newer than 2.0-2. Exact commands for each OS are on this page.
Is CVE-2013-4732 being exploited?
CVE-2013-4732 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2013-4732 affect?
CVE-2013-4732 affects dasdec eas, r189 one-net eas. Severity is high (CVSS 10.0). The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Electronics R189 One-Net EAS device through 2.0-2 uses predictable session ID values, which makes it easier for remote attackers to hi
How urgent is CVE-2013-4732?
Priority 57/100. Critical severity
Related CVEs
- CVE-2013-4735 HIGH 10.0 UPGRADE UPGRADE The Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device be
- CVE-2013-4734 HIGH 7.3 UPGRADE UPGRADE dasdec_mkuser on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-
- CVE-2013-4733 HIGH 7.5 UPGRADE UPGRADE The web server on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One
- CVE-2013-0137 HIGH 10.0 UPGRADE UPGRADE The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electroni