This vulnerability (CVE-2024-47945) affects certain devices whose session ID generation algorithm uses insufficient entropy, resulting in predictable session IDs. The session IDs have only 32,768 possible values per user due to the use of an insecure rand() function without proper initialization via srand(), effectively seeding only with process IDs. This weakness enables attackers to pre-generate valid session IDs and hijack user sessions without authorization.