WF
Product
Wise-4010lan Firmware
8
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 5Low 1
Watch
Add Wise-4010lan Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-48469 | 9.6 | Jun 24 | Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload firmware through a public update page, potentially leading to backdoor installation… Affected: All versions, or not specified |
| CVE-2025-48466 | 8.1 | Jun 24 | Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote… Affected: All versions, or not specified |
| CVE-2025-48467 | 6.5 | Jun 24 | Successful exploitation of the vulnerability could allow an attacker to cause repeated reboots, potentially leading to remote denial-of-service and system unavailability Affected: 2.02b00 |
| CVE-2025-48468 | 6.4 | Jun 24 | Successful exploitation of the vulnerability could allow an attacker that has physical access to interface with JTAG to inject or modify firmware Affected: 2.02b00 |
| CVE-2025-48461 | 5.0 | Jun 24 | Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable,… Affected: All versions, or not specified |
| CVE-2025-48462 | 4.2 | Jun 24 | Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block other users from logging in, thereby preventing legitimate… Affected: All versions, or not specified |
| CVE-2025-48470 | 4.1 | Jun 24 | Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scripts into device fields and executed in other users’… Affected: All versions, or not specified |
| CVE-2025-48463 | 3.1 | Jun 24 | Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted… Affected: All versions, or not specified |
Showing 8
