Vulnerabilities in Advantech Co., Ltd.
11 resultsVexday analysis
A Advantech apresenta 11 vulnerabilidades catalogadas, das quais apenas 1 atinge nível crítico; nenhuma está sob ataque ativo no momento e nenhuma foi publicada nos últimos 90 dias, indicando uma postura de risco moderado e estável. A fraqueza predominante é injeção de código (CWE-79), típica de aplicações web, que requer validação e sanitização robustas de entrada.
CVE-2025-34256CRITICALAdvantech WISE-DeviceOn Server < 5.4 Hard-coded JWT Key Authentication BypassEPSS 0.7%CVE-2025-34261MEDIUMAdvantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicegroups/EPSS 0.3%CVE-2025-34257MEDIUMAdvantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via action/definedEPSS 0.3%CVE-2025-34259MEDIUMAdvantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/buildingEPSS 0.3%CVE-2025-34260MEDIUMAdvantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via action/scheduleEPSS 0.2%CVE-2025-34258MEDIUMAdvantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/planEPSS 0.2%CVE-2025-34266MEDIUMAdvantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via plugin-config/addins/menusEPSS 0.2%CVE-2025-34262MEDIUMAdvantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devices/name/{agent_id}EPSS 0.2%CVE-2025-34265MEDIUMAdvantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via rule-enginesEPSS 0.2%CVE-2025-34263MEDIUMAdvantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via plugin-config/dashboards/menusEPSS 0.2%CVE-2025-34264MEDIUMAdvantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via dog/{agentId}EPSS 0.2%