9.6
CVE-2025-48469
- EPSS 0.09%
- Published 24.06.2025 02:17:41
- Last modified 09.07.2025 15:21:28
- Source 5f57b9bf-260d-4433-bf07-b6a79e
- Teams watchlist Login
- Open Login
Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload firmware through a public update page, potentially leading to backdoor installation or privilege escalation.
Data is provided by the National Vulnerability Database (NVD)
Advantech ≫ Wise-4060lan Firmware Version-
Advantech ≫ Wise-4050lan Firmware Version-
Advantech ≫ Wise-4010lan Firmware Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Type | Source | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.09% | 0.268 |
Source | Base Score | Exploit Score | Impact Score | Vector string |
---|---|---|---|---|
5f57b9bf-260d-4433-bf07-b6a79e9bb7d4 | 9.6 | 2.8 | 6 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
|
CWE-306 Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.