CVE-2025-48463: low-severity vulnerability in Advantech Wireless Sensing and Equipment (WISE)
Unencrypted HTTP Communication
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.1epss 0.1%
Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted HTTP communication, potentially leading to unauthorised access or data tampering.
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Advantech · Advantech Wireless Sensing and Equipment (WISE)Related CVEs — Advantech Wireless Sensing and Equipment (WISE)
In the same product, most dangerous first.
CVE-2025-48466HIGHModbus Command Injection without AuthenticationEPSS 0.6%CVE-2025-48469CRITICALUnauthenticated Firmware UploadEPSS 0.5%CVE-2025-48461MEDIUMWeak Session Cookie EntropyEPSS 0.5%CVE-2025-48467MEDIUMDenial of Service via Malformed Modbus PacketsEPSS 0.2%CVE-2025-48462MEDIUMLogin Session ExhaustionEPSS 0.2%CVE-2025-48470MEDIUMStored Cross site Scripting (XSS)EPSS 0.2%