COMMGR vulnerabilities

1 known vulnerability in COMMGR from Delta Electronics. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  COMMGR: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2025-3495Apr 16, 2025Delta Electronics

  Delta Electronics COMMGR v1 and v2 uses insufficiently randomized values to generate session IDs (CWE-338). An attacker could easily brute force a session ID and load and execute arbitrary code.