CVE-2025-48469criticalCWE-306

CVE-2025-48469: falha crítica em Advantech Wireless Sensing and Equipment (WISE)

Unauthenticated Firmware Upload

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Advantech Wireless Sensing and Equipment

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.6epss 0.5%
Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload firmware through a public update page, potentially leading to backdoor installation or privilege escalation.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Advantech · Advantech Wireless Sensing and Equipment (WISE)
CVEs relacionadas — Advantech Wireless Sensing and Equipment (WISE)

No mesmo produto, das mais perigosas para as menos.

CVE-2025-48466HIGHModbus Command Injection without AuthenticationEPSS 0.6%CVE-2025-48461MEDIUMWeak Session Cookie EntropyEPSS 0.5%CVE-2025-48467MEDIUMDenial of Service via Malformed Modbus PacketsEPSS 0.2%CVE-2025-48462MEDIUMLogin Session ExhaustionEPSS 0.2%CVE-2025-48470MEDIUMStored Cross site Scripting (XSS)EPSS 0.2%CVE-2025-48468MEDIUMOpen JTAG Debug PortEPSS 0.2%