Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scripts into device fields and executed in other users’ browser, potentially leading to session hijacking, defacement, credential theft, or privilege escalation.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
09 Jul 2025, 15:21
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:advantech:wise-4010lan:-:*:*:*:*:*:*:* cpe:2.3:o:advantech:wise-4060lan_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:advantech:wise-4050lan_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:advantech:wise-4060lan:-:*:*:*:*:*:*:* cpe:2.3:o:advantech:wise-4010lan_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:advantech:wise-4050lan:-:*:*:*:*:*:*:* |
|
| First Time |
Advantech
Advantech wise-4060lan Advantech wise-4010lan Firmware Advantech wise-4010lan Advantech wise-4050lan Firmware Advantech wise-4060lan Firmware Advantech wise-4050lan |
|
| References | () https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061 - Third Party Advisory |
24 Jun 2025, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-24 03:15
Updated : 2025-07-09 15:21
NVD link : CVE-2025-48470
Mitre link : CVE-2025-48470
JSON object : View
Products Affected
advantech
- wise-4060lan_firmware
- wise-4050lan_firmware
- wise-4050lan
- wise-4060lan
- wise-4010lan_firmware
- wise-4010lan
CWE
No CWE.
