This vulnerability (CWE-613: Insufficient Session Expiration) affects Frauscher Sensortechnik FDS 102 version 2.1.0. It allows an unauthenticated remote attacker who possesses a valid session identifier to maintain access beyond the intended session expiration time. The attacker does not require user interaction or privileges to exploit this issue. The vulnerability has a CVSS 4.0 score of 9.2 (critical), reflecting its high impact on confidentiality, integrity, and availability due to prolonged unauthorized access. No official remediation or patch has been published as of the data provided.

An attacker with a valid session token can continue accessing the FDS 102 web interface after the session should have expired, potentially leading to unauthorized access and control. This increases the risk associated with compromised session tokens, including stolen, leaked, shared, or unattended sessions, potentially allowing persistent unauthorized access to sensitive system functions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should consider implementing compensating controls such as manual session invalidation, monitoring for unusual session activity, and restricting access to trusted networks. Avoid sharing session tokens and ensure sessions are properly terminated on user logout.