← Back

CVE-2025-48466

nvd nist
Published: Jun 24, 2025Modified: Jun 17, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Exploitability: 2.8 / Impact: 5.2
Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4 (Secondary)

Description

Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.

Affected (3)

Advantech
3 products
Wise 4060lan Firmware
Wise 4050lan Firmware
Wise 4010lan Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wise 4060lan Firmware
Version 2.02b00
Running on/withPlatform Versions
Advantech
Wise 4060lan
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wise 4050lan Firmware
All versions
Running on/withPlatform Versions
Advantech
Wise 4050lan
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wise 4010lan Firmware
All versions
Running on/withPlatform Versions
Advantech
Wise 4010lan
All versions

Related CWEs

CWE-863
Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (2)

Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
ExploitThird Party Advisory
Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
Third Party Advisory

Timeline

No history available yet.