PT-2025-14379 · Infinxt · Infinxt Iedge 100

Name of the Vulnerable Software and Affected Versions: Infinxt iEdge 100 version 2.1.32 Description: A command injection issue exists in the Troubleshoot module's "MTR" functionality due to improper validation of user-supplied input in the mtrIp parameter. This allows an attacker to execute...

CVE-2025-26054

Infinxt iEdge 100 2.1.32 is vulnerable to Cross Site Scripting XSS via the "Description" field during LAN configuration...

Infinxt iEdge 100 安全漏洞

Infinxt iEdge 100 is a next-generation secure SD-WAN appliance for small and medium-sized branch offices from Infinxt. A security vulnerability exists in Infinxt iEdge 100 version 2.1.32, which stems from a command injection in the tracertVal parameter in the Tracert function...

CVE-2025-26054

CVE-2025-26054 affects Infinxt iEdge 100 (version 2.1.32). The vulnerability is a Cross Site Scripting (XSS) flaw exploitable via the Description field during LAN configuration, caused by unsanitized user-controlled input in that field. CVSS v3.1 base score 5.4 (Medium) with Network attack vector...

The vulnerability of the Advantech DeviceOn/iEdge Server software lies in improper default access rights settings, which allow attackers to escalate their privileges.

The vulnerability of the Advantech DeviceOn/iEdge Server software is related to incorrect default access permissions settings. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created file...

CVE-2021-40389

A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iEdge Server 1.0.2. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability...

Privilege escalation

A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iEdge Server 1.0.2. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-40389

A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iEdge Server 1.0.2. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-40389

CVE-2021-40389 affects Advantech DeviceOn/iEdge Server 1.0.2. The vulnerability (CWE-276: Incorrect Default Permissions) arises from default permissions in the installation folder (e.g., c:\Program Files\Advantech\…) that let the Everyone group have full control over critical service binaries. An...

Advantech DeviceOn/iEdge Server Elevation of Privilege Vulnerability

Advantech DeviceOn/iEdge Server is industrial device intelligence software that enables non-intelligent devices to have IoT connectivity management capabilities.Advantech DeviceOn/iEdge Server elevation of privilege vulnerability can be exploited by attackers to gain elevated privileges to NT...

Advantech DeviceOn/iEdge Server 1.0.2 privilege escalation vulnerability

Summary A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iEdge Server 1.0.2. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability. Tested...

Advantech 安全漏洞

Advantech DeviceOn/iEdge Server is industrial device intelligence software that enables non-intelligent devices to have IoT connectivity management capabilities.Advantech DeviceOn/iEdge Server elevation of privilege vulnerability can be exploited by attackers to gain elevated privileges to NT...