CVE-2025-48461

CVE-2025-48461 Predictable session cookies that can be bruteforced to gain unauthorized access to Advantech WISE portal Summary During examination of Advantech WISE-4060 web portal, I have discovered that the session cookies used to authenticate to the web portal follows the pattern 60D01EXXXXX...

Session Cookie Handler component

The vulnerability of the Session Cookie Handler component in the microprogramming-based Ethernet modules WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN relates to the ability to retrieve user credentials. Exploiting this vulnerability could allow a malicious actor to obtain user passwords through...

Code Execution Vulnerabilities in Multiple Advantech Products

The Advantech WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN are all industrial automation controllers from Advantech of Taiwan, China. A code execution vulnerability exists in multiple Advantech products, which can be exploited by attackers to inject or modify firmware via the JTAG interface...

Advantech多款产品 安全漏洞

The Advantech WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN are all industrial automation controllers from Advantech of Taiwan, China. An information disclosure vulnerability exists in multiple Advantech products, which can be exploited by attackers to cause data interception and session hijacking...

Advantech多款产品 安全漏洞

The Advantech WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN are all industrial automation controllers from Advantech of Taiwan, China. A command execution vulnerability exists in multiple Advantech products, which can be exploited by an attacker to remotely control a relay channel...

Advantech多款产品 安全漏洞

The Advantech WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN are all industrial automation controllers from Advantech of Taiwan, China. A cross-site scripting vulnerability exists in multiple Advantech products. The vulnerability stems from the lack of effective filtering and escaping of...

WISE-4060 Adam-6050 D URL Redirect

The vulnerability of the software for Ethernet server modules WISE-4060 and Adam-6050 D lies in the insufficient protection of web pages. Exploiting this vulnerability can allow a remote attacker to redirect users to any arbitrary URL address...

WISE-4060 Basic HTTP Authentication Information Disclosure

The vulnerability of the “Basic HTTP Authentication” method in the Ethernet web application of the WISE-4060 module involves the transmission of data in an open manner. Exploiting this vulnerability could allow a remote attacker to gain access to confidential information...

WISE-4060 Adam-6050 D Authentication Failure DoS

The vulnerability of the Microprogrammed Ethernet module software of WISE-4060 and Adam-6050 D lies in the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

WISE-4060 Ethernet Weak Password Requirements

The vulnerability of the microprogrammed Ethernet module WISE-4060, Adam-6050 D, and Adam.NET Utilit is related to weak password requirements. Exploiting this vulnerability could allow a malicious actor to compromise user credentials through brute-force attacks...

WISE-4060 Ethernet module Session Management Unauthorized Access

The vulnerability of the WISE-4060 Ethernet module’s microprogramming software is related to session management errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the device remotely...

WISE-4060 Adam-6050 D Device Identification

The vulnerability of the microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to identify the devices used in the network through a specially crafted network packet...

WISE-4060 Adam-6050 D Weak Encryption Full Access

The vulnerability of the microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in the use of weak encryption algorithms. Exploiting this vulnerability can allow an attacker operating remotely to gain full access to the device with administrator privileges...

WISE-4060 Ethernet module Privilege Escalation

The vulnerability of the WISE-4060 Ethernet module’s microprogramming software is related to deficiencies in the password change process via the web server. Exploiting this vulnerability could allow an attacker to gain full access to the device with administrator privileges...

WISE-4060 Ethernet module Unencrypted Storage

The vulnerability of the WISE-4060 Ethernet module’s microprogramming software is related to the unencrypted storage of confidential information. Exploiting this vulnerability could allow an attacker to gain full access to the device’s configuration files...

WISE-4060 Adam-6050 D Authentication Bypass Privilege Escalation

The vulnerability of the microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in the deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain full access to the device with administrator privileges using a specially crafted package...

WISE-4060 Adam-6050 D Input Password Verification

The vulnerability of the Microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in the deficiencies in the input password verification process. Exploiting this vulnerability allows a malicious actor to gain full access to the device with administrator privileges through a specially crafte...

Ethernet Module WISE-4060 Adam-6050 D Password Reset Default

The vulnerability of the Ethernet microprogramming systems WISE-4060 and Adam-6050 D is related to errors in the password recovery mechanism. Exploiting this vulnerability allows a remote attacker to restore default settings using a specially crafted data packet...

PT-2021-5475

Name of the Vulnerable Software and Affected Versions WISE-4060, Adam-6050 D, Adam.NET Utility affected versions not specified Description The issue is related to a lack of authentication attempt limitations in the Ethernet module software. This could allow a remote attacker to gain full access t...

PT-2021-5473

Name of the Vulnerable Software and Affected Versions WISE-4060 affected versions not specified Description The issue is related to a flaw in the password change procedure via the web server in the WISE-4060 Ethernet module's firmware. This flaw can allow a remote attacker to gain full access to...