CVE-2025-48466

CVE-2025-48466 is linked to Advantech WISE-4060LAN and related models (WISE-4010LAN, WISE-4050LAN). The issue allows an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially enabling remote control of relay channels and creating operational/safety ...

CVE-2025-48461

CVE-2025-48461 involves weak, predictable session cookies that enable an unauthenticated attacker to perform brute‑force guessing and account takeover, potentially gaining root/admin/user access and resetting passwords. Connected sources reference affected Advantech industrial controllers (WISE-4...

CVE-2025-48469

CVE-2025-48469 is an unauthenticated firmware upload vulnerability widely described across multiple feeds. The initial entry states that a successful exploit could allow an unauthenticated attacker to upload firmware through a public update page, potentially enabling backdoor installation or priv...

CVE-2025-48463

CVE-2025-48463 concerns unencrypted HTTP leading to data interception and session hijacking. The provided docs confirm this vulnerability affects multiple products/vendors and characterize the impact as possible unauthorised access or data tampering due to cleartext traffic. The NVD/RH Red Hat en...

CVE-2025-48468

CVE-2025-48468 centers on an open JTAG debug port that, with physical access, lets an attacker inject or modify firmware. Multiple connected sources tie this to Advantech industrial controllers (e.g., WISE-4010LAN, WISE-4050LAN, WISE-4060LAN) and describe the root cause as reliance on a JTAG inte...

CVE-2025-48467

CVE-2025-48467 (Denial of Service via Malformed Modbus Packets) has concrete details in connected documents: multiple sources report a DoS causing repeated reboots leading to remote unavailability, affecting Advantech WISE-series devices (WISE-4010LAN, WISE-4050LAN, WISE-4060LAN). The root cause ...

CVE-2025-48462

CVE-2025-48462 describes a login session exhaustion vulnerability that could allow an attacker to consume all available session slots, blocking legitimate users from logging in (impact described as denial of service). Supported by connected sources: for Apache HTTP Server (PT-2025-26676) the affe...

CVE-2025-48470

CVE-2025-48470 is a stored cross-site scripting (XSS) vulnerability affecting Advantech devices (notably WISE-4010LAN, WISE-4050LAN, WISE-4060LAN per CNNVD). The issue allows an attacker to inject malicious scripts into device fields, which can execute in other users’ browsers and potentially lea...