CVE-2025-48462: medium-severity vulnerability in Advantech Wireless Sensing and Equipment (WISE)
Login Session Exhaustion
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.2epss 0.2%
Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block other users from logging in, thereby preventing legitimate users from gaining access to the product.
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected products
Advantech · Advantech Wireless Sensing and Equipment (WISE)Related CVEs — Advantech Wireless Sensing and Equipment (WISE)
In the same product, most dangerous first.
CVE-2025-48466HIGHModbus Command Injection without AuthenticationEPSS 0.6%CVE-2025-48469CRITICALUnauthenticated Firmware UploadEPSS 0.5%CVE-2025-48461MEDIUMWeak Session Cookie EntropyEPSS 0.5%CVE-2025-48467MEDIUMDenial of Service via Malformed Modbus PacketsEPSS 0.2%CVE-2025-48470MEDIUMStored Cross site Scripting (XSS)EPSS 0.2%CVE-2025-48468MEDIUMOpen JTAG Debug PortEPSS 0.2%