PatchTheCVECVE-2025-48461: Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force gu
CVE-2025-48461 is a medium-severity flaw (CVSS 5.0) affecting wise-4060lan firmware, wise-4050lan firmware, wise-4010lan firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset passwords.
Why this priority
- No elevated risk signals yet
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 5.0 (Medium) |
| Attack vector | Adjacent network |
| Attack complexity | High |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.5% (top 59%) |
| CISA exploited list | No |
| Weakness | CWE-341 |
| Published | 2025-06-24 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-48461?
wise-4060lan firmware: mitigate or apply the listed mitigation; wise-4050lan firmware: mitigate or apply the listed mitigation; wise-4010lan firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2025-48461 being exploited?
CVE-2025-48461 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-48461 affect?
CVE-2025-48461 affects wise-4060lan firmware, wise-4050lan firmware, wise-4010lan firmware. Severity is medium (CVSS 5.0). Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user
How urgent is CVE-2025-48461?
Priority 28/100. No elevated risk signals yet.
Software pages
Related CVEs
- CVE-2025-48470 MEDIUM 4.1 MITIGATE MITIGATE Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject mal
- CVE-2025-48469 CRITICAL 9.6 MITIGATE MITIGATE Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload firmware throug
- CVE-2025-48468 MEDIUM 6.4 MITIGATE MITIGATE Successful exploitation of the vulnerability could allow an attacker that has physical access to interface wit
- CVE-2025-48467 MEDIUM 6.5 MITIGATE MITIGATE Successful exploitation of the vulnerability could allow an attacker to cause repeated reboots, potentially le
- CVE-2025-48466 HIGH 8.1 MITIGATE MITIGATE Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TC