Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset passwords.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
09 Jul 2025, 15:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061/ - Third Party Advisory | |
| CPE | cpe:2.3:h:advantech:wise-4010lan:-:*:*:*:*:*:*:* cpe:2.3:o:advantech:wise-4060lan_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:advantech:wise-4050lan_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:advantech:wise-4060lan:-:*:*:*:*:*:*:* cpe:2.3:o:advantech:wise-4010lan_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:advantech:wise-4050lan:-:*:*:*:*:*:*:* |
|
| First Time |
Advantech
Advantech wise-4060lan Advantech wise-4010lan Firmware Advantech wise-4010lan Advantech wise-4050lan Firmware Advantech wise-4060lan Firmware Advantech wise-4050lan |
24 Jun 2025, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-24 03:15
Updated : 2025-07-09 15:02
NVD link : CVE-2025-48461
Mitre link : CVE-2025-48461
JSON object : View
Products Affected
advantech
- wise-4060lan_firmware
- wise-4050lan_firmware
- wise-4050lan
- wise-4060lan
- wise-4010lan_firmware
- wise-4010lan
CWE
No CWE.