← Retour aux CVEs
CVE-2025-27847
MEDIUM4.3
Description
In ESPEC North America Web Controller 3 before 3.3.8, /api/v4/auth/ users session privileges are not revoked on logout.
Details CVE
Score CVSS v3.14.3
SeveriteMEDIUM
Vecteur CVSSCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Vecteur d'attaquePHYSICAL
ComplexiteLOW
Privileges requisNONE
Interaction utilisateurNONE
Publie8/14/2025
Derniere modification8/15/2025
Sourcenvd
Observations honeypot0
Faiblesses (CWE)
CWE-269
References
https://espec.com(cve@mitre.org)
https://espec.com/na/about/detail/cve_2025_27847(cve@mitre.org)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.