WF
Product
Wise-4060lan Firmware
by Advantech · last CVE Jun 24, 2025
8
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 5Low 1
Watch

Add Wise-4060lan Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-48469
9.6
0%
Jun 24
Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload firmware through a public update page, potentially leading to backdoor installation…
Affected: All versions, or not specified
CVE-2025-48466
8.1
1%
Jun 24
Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote…
Affected: 2.02b00
CVE-2025-48467
6.5
0%
Jun 24
Successful exploitation of the vulnerability could allow an attacker to cause repeated reboots, potentially leading to remote denial-of-service and system unavailability
Affected: 2.02b00
CVE-2025-48468
6.4
0%
Jun 24
Successful exploitation of the vulnerability could allow an attacker that has physical access to interface with JTAG to inject or modify firmware
Affected: 2.02b00
CVE-2025-48461
5.0
0%
Jun 24
Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable,…
Affected: All versions, or not specified
CVE-2025-48462
4.2
0%
Jun 24
Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block other users from logging in, thereby preventing legitimate…
Affected: All versions, or not specified
CVE-2025-48470
4.1
0%
Jun 24
Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scripts into device fields and executed in other users’…
Affected: All versions, or not specified
CVE-2025-48463
3.1
0%
Jun 24
Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted…
Affected: All versions, or not specified
Showing 8