---
cve: "CVE-2026-27515"
severity: "CRITICAL"
cvss: 9.3
epss: "0.4%"
vendor: "Binardat Ltd."
kev: false
exploited: false
published: "2026-02-24 15:04:41"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-10-31T20:24:14+01:00"
---

# CVE-2026-27515

> 9.3 CRITICAL

## Beschreibung

Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session identifiers in the web management interface. An attacker can guess valid session IDs and hijack authenticated sessions.

## CNA-Record (Kanon, cvelistV5)

- CNA: **VulnCheck**
- State: PUBLISHED
- Stand: 2026-02-27 18:58:38
- CNA-CVSS: **9.3** (`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N`)

## CISA-Anreicherung (vulnrichment/ADP)

- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **none**
  - Automatable: **yes**
  - Technical Impact: **total**

## CVSS-Vektor

```
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |

## Schwachstellen-Klasse

- **CWE-330** — Use of Insufficiently Random Values
  The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

## Angriffsmuster (CAPEC)

- [CAPEC-59 — Session Credential Falsification through Prediction](https://capec.mitre.org/data/definitions/59.html) _(Severity: High)_
- [CAPEC-112 — Brute Force](https://capec.mitre.org/data/definitions/112.html) _(Severity: High)_
- [CAPEC-485 — Signature Spoofing by Key Recreation](https://capec.mitre.org/data/definitions/485.html) _(Severity: High)_

## ATT&CK-Techniken

- [T1110 — Brute Force](https://attack.mitre.org/techniques/T1110/)
- [T1552.004 — Unsecure Credentials: Private Keys](https://attack.mitre.org/techniques/T1552/004/)

## Referenzen

- <https://www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch>
- <https://www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-predictable-session-identifiers>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2026-27515/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_