CVE-2025-27847

Description

In ESPEC North America Web Controller 3 before 3.3.8, /api/v4/auth/ users session privileges are not revoked on logout.

PUBLISHED Reserved 2025-03-09 | Published 2025-08-14 | Updated 2025-08-15 | Assigner mitre

References

espec.com

espec.com/na/about/detail/cve_2025_27847

cve.org (CVE-2025-27847)

nvd.nist.gov (CVE-2025-27847)

Download JSON