Wise-4010lan Firmware (Advantech) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-06-24. Vendor: Advantech.

CVEs of Wise-4010lan Firmware

• CVE-2025-48466 - CVSS 8.1 (high), 2025-06-24: Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs,…
• CVE-2025-48469 - CVSS 9.6 (critical), 2025-06-24: Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload firmware through a public update page, potentially leading to…
• CVE-2025-48468 - CVSS 6.4 (medium), 2025-06-24: Successful exploitation of the vulnerability could allow an attacker that has physical access to interface with JTAG to inject or modify firmware.
• CVE-2025-48467 - CVSS 6.5 (medium), 2025-06-24: Successful exploitation of the vulnerability could allow an attacker to cause repeated reboots, potentially leading to remote denial-of-service and system…
• CVE-2025-48470 - CVSS 4.1 (medium), 2025-06-24: Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scripts into device fields and executed…
• CVE-2025-48461 - CVSS 5 (medium), 2025-06-24: Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session…
• CVE-2025-48463 - CVSS 3.1 (low), 2025-06-24: Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable…
• CVE-2025-48462 - CVSS 4.2 (medium), 2025-06-24: Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block other users from logging in, thereby…