CVE-2025-48470: falha de média gravidade em Advantech Wireless Sensing and Equipment (WISE)
Stored Cross site Scripting (XSS)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.1epss 0.2%
Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scripts into device fields and executed in other users’ browser, potentially leading to session hijacking, defacement, credential theft, or privilege escalation.
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Produtos afetados
Advantech · Advantech Wireless Sensing and Equipment (WISE)CVEs relacionadas — Advantech Wireless Sensing and Equipment (WISE)
No mesmo produto, das mais perigosas para as menos.
CVE-2025-48466HIGHModbus Command Injection without AuthenticationEPSS 0.6%CVE-2025-48469CRITICALUnauthenticated Firmware UploadEPSS 0.5%CVE-2025-48461MEDIUMWeak Session Cookie EntropyEPSS 0.5%CVE-2025-48467MEDIUMDenial of Service via Malformed Modbus PacketsEPSS 0.2%CVE-2025-48462MEDIUMLogin Session ExhaustionEPSS 0.2%CVE-2025-48468MEDIUMOpen JTAG Debug PortEPSS 0.2%