CVE-2013-4732

The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Electronics R189 One-Net EAS device through 2.0-2 uses predictable session ID values, which makes it easier for remote attackers to hijack sessions by sniffing the network. NOTE: VU#662676 states "Monroe Electronics could not reproduce this finding.

• CWE-255

• http://www.digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdfVendor Advisory
• http://www.kb.cert.org/vuls/id/662676US Government Resource
• http://www.kb.cert.org/vuls/id/AAMN-98MU7HUS Government Resource
• http://www.kb.cert.org/vuls/id/AAMN-98MUK2US Government Resource
• http://www.monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdfVendor Advisory
• http://www.digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdfVendor Advisory
• http://www.kb.cert.org/vuls/id/662676US Government Resource
• http://www.kb.cert.org/vuls/id/AAMN-98MU7HUS Government Resource
• http://www.kb.cert.org/vuls/id/AAMN-98MUK2US Government Resource
• http://www.monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdfVendor Advisory

Published

Jun 30, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4726Cross-site request forgery (CSRF) vulnerability in DDSN Inte…
• CVE-2013-4727DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b…
• CVE-2013-4728DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b…
• CVE-2013-4729import.php in phpMyAdmin 4.x before 4.0.4.1 does not properl…
• CVE-2013-4730Buffer overflow in PCMan's FTP Server 2.0.7 allows remote at…
• CVE-2013-4731ajax.cgi in the web interface on the Choice Wireless Green P…
• CVE-2013-4733The web server on the Digital Alert Systems DASDEC EAS devic…7.5
• CVE-2013-4734dasdec_mkuser on the Digital Alert Systems DASDEC EAS device…7.3
• CVE-2013-4735The Digital Alert Systems DASDEC EAS device before 2.0-2 and…
• CVE-2013-4736Multiple integer overflows in the JPEG engine drivers in the…
• CVE-2013-4737The CONFIG_STRICT_MEMORY_RWX implementation for the Linux ke…
• CVE-2013-4738Multiple stack-based buffer overflows in the MSM camera driv…