CVE-2025-52689
Weak Session ID Check in the OmniAccess Stellar Web Management Interface
CRITICAL 9.8EPSS 16.7%
Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point.
- Affected
- Alcatel-Lucent · OmniAccess Stellar Products
- CVSS v3.1 CNA
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 16.73% chance of exploitation in the next 30 days, 97th percentile
- Published
- 2025-07-16
Proof-of-concept exploits (1)
- UltimateHG/CVE-2025-52689-PoC0★ · 2025-07-16