PT-2025-3910 · Cp Plus · Cp Plus Router

Karan Patel + 1 · Published 2025-01-20 · Updated 2025-01-20 · CVE-2025-0479

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions CP Plus Router (affected versions not specified)

Description This issue exists due to insecure handling of cookie flags used within the web interface of the CP Plus Router. A remote attacker could exploit this by intercepting data transmissions during an HTTP session on the vulnerable system. Successful exploitation could allow the attacker to obtain sensitive information and compromise the targeted system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-614

CWE-1004

Related Identifiers

CVE-2025-0479

Affected Products

Cp Plus Router

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-0479 · Security Note
• https://t.me/latest_high_impact_cve/1771 · Telegram Post
• https://t.me/cvenotify/107926 · Telegram Post
• https://twitter.com/CveFindCom/status/1881311392633880642 · Twitter Post
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0005 · Note
• https://twitter.com/CVEnew/status/1881308299083030904 · Twitter Post
• https://t.me/cvedetector/15885 · Telegram Post