CVEvulnerability
CVE-2025-48466
8.1 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-06-24
- Last modified
- 2026-06-17
- Assigner
- 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
- CVSS 3.1 (5f57b9bf-260d-4433-bf07-b6a79e9bb7d4)
- 8.1 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- Weaknesses
- CWE-863
Description
Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.
Affected configurations
• advantech wise-4060lan firmware 2.02b00
• advantech wise-4050lan firmware
• advantech wise-4010lan firmware
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://github.com/shipcod3/CVE-2025-48466 Exploit, Third Party Advisory
- https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061 Third Party Advisory