How severe is CVE-2025-0479?

This vulnerability has a severity rating of HIGH with a CVSS score of N/A out of 10.

What type of vulnerability is CVE-2025-0479?

This is classified as CWE-614, which is a common weakness in software security.

CVE-2025-0479

HIGH Year: 2025

Weakness Type

CWE-614

View all →

Vulnerability Description

This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface. A remote attacker could exploit this vulnerability by intercepting data transmissions during an HTTP session on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to obtain sensitive information and compromise the targeted system.

CVE-2020-27651

HIGH

CVSS:8.1(High)

Synology Router Manager (SRM) before 1.2.4-8081 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepti...

CWE-6142020

CVE-2018-25060

HIGH

CVSS:7.5(High)

A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to se...

CWE-6142018

CVE-2022-25151

HIGH

CVSS:7.5(High)

Within the Service Desk module of the ITarian platform (SAAS and on-premise), a remote attacker can obtain sensitive information, caused by the failure to set the HTTP Only flag. A remote attacker cou...

CWE-6142022