← Back

CVE-2025-48468

nvd nist
Published: Jun 24, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.4
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.5 / Impact: 5.9
Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4 (Secondary)

Description

Successful exploitation of the vulnerability could allow an attacker that has physical access to interface with JTAG to inject or modify firmware.

Affected (3)

Advantech
3 products
Wise 4010lan Firmware
Wise 4050lan Firmware
Wise 4060lan Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wise 4010lan Firmware
Version 2.02b00
Running on/withPlatform Versions
Advantech
Wise 4010lan
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wise 4050lan Firmware
Version 2.02b00
Running on/withPlatform Versions
Advantech
Wise 4050lan
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wise 4060lan Firmware
Version 2.02b00
Running on/withPlatform Versions
Advantech
Wise 4060lan
All versions

Related CWEs

CWE-1191
On-Chip Debug and Test Interface With Improper Access Control
The chip does not implement or does not correctly perform access control to check whether users are authorized to access internal registers and test modes through the physical debug/test interface.

References (1)

Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
Vendor Advisory

Timeline

No history available yet.