Read the docs

Advantech

Records434All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical118CVSS 9.0–10.0
CVSS high195CVSS 7.0–8.9

Exploited now

Advantech records in CISA KEV

No Advantech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in Wise-4010lan Firmware · all components

Priority HIGH 70

Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead t…

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00557 Published 2025-06-24 No fix listed CWE-863
TI-2025-30748 CVE-2025-48469 · GHSA-743v-hvcx-fjh9

Unauthenticated Firmware Upload

Priority MEDIUM 43

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload firmware through a public update page, potentially leading to backdoor installation or privilege escalation.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00481 Published 2025-06-24 No fix listed CWE-306
TI-2025-30747 CVE-2025-48468 · GHSA-8x28-6c83-r9jr

Open JTAG Debug Port

Priority LOW 30

Successful exploitation of the vulnerability could allow an attacker that has physical access to interface with JTAG to inject or modify firmware.

CVSS 3.1MEDIUM 6.4 Physical No auth No interaction EPSS 0.00186 Published 2025-06-24 No fix listed CWE-1191
Priority LOW 28

Successful exploitation of the vulnerability could allow an attacker to cause repeated reboots, potentially leading to remote denial-of-service and system unavailability.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00244 Published 2025-06-24 No fix listed CWE-770
TI-2025-30741 CVE-2025-48461 · GHSA-4f7c-7x79-wr4p

Weak Session Cookie Entropy

Priority LOW 23

Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain…

CVSS 3.1MEDIUM 5.0 Adjacent network No auth No interaction EPSS 0.00475 Published 2025-06-24 No fix listed CWE-341
Priority LOW 19

Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scripts into device fields and executed in other users’ browser, potentially leading to session hijacki…

CVSS 3.1MEDIUM 4.1 Adjacent network High privileges User interaction EPSS 0.00193 Published 2025-06-24 No fix listed CWE-79
TI-2025-30742 CVE-2025-48462 · GHSA-7qh6-rfpx-934h

Login Session Exhaustion

Priority LOW 19

Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block other users from logging in, thereby preventing legitimate users from gaining access to the product.

CVSS 3.1MEDIUM 4.2 Adjacent network High privileges No interaction EPSS 0.00195 Published 2025-06-24 No fix listed CWE-770
TI-2025-30743 CVE-2025-48463 · GHSA-433p-qq24-g8q3

Unencrypted HTTP Communication

Priority LOW 14

Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted HTTP communication, potentially leading…

CVSS 3.1LOW 3.1 Adjacent network No auth No interaction EPSS 0.00127 Published 2025-06-24 No fix listed CWE-312
Open these records in search →