DE
Product
Deviceon/iedge
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 1Low 0
Watch
Add Deviceon/iedge to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-62630 | 9.8 | Nov 6 | Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level… Affected: through 2.0.2 |
| CVE-2025-59171 | 9.8 | Nov 6 | Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level… Affected: through 2.0.2 |
| CVE-2025-58423 | 8.8 | Nov 6 | Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to cause a denial-of-service condition, traverse directories, or read/write… Affected: through 2.0.2 |
| CVE-2021-40389 | 8.8 | Jan 28 | A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iEdge Server 1.0.2 Affected: 1.0.2 |
| CVE-2025-64302 | 5.4 | Nov 6 | Insufficient input sanitization in the dashboard label or path can allow an attacker to trigger a device error causing information disclosure or data manipulation Affected: through 2.0.2 |
Showing 5