Skip to content
OpenAdvisories
High ICSA-25-310-01 4 CVEs

Advantech DeviceOn/iEdge

Published Nov 6, 2025 · Updated Nov 6, 2025

Vendor: Advantech Product: DeviceOn/iEdge

Summary

Successful exploitation of these vulnerabilities could result in a denial-of-service condition, remote code execution, or an attacker reading arbitrary files.

Vulnerabilities 4

  • High 8.8
    CVE-2025-58423

    Advantech DeviceOn/iEdge Path Traversal

    Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to cause a denial-of-service condition, traverse directories, or read/write files, within the context of the local system account.

    Advantech DeviceOn/iEdge
  • High 8.8
    CVE-2025-62630

    Advantech DeviceOn/iEdge Path Traversal

    Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions.

    Advantech DeviceOn/iEdge
  • High 7.5
    CVE-2025-59171

    Advantech DeviceOn/iEdge Path Traversal

    Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions.

    Advantech DeviceOn/iEdge
  • Medium 6.4
    CVE-2025-64302

    Advantech DeviceOn/iEdge Cross-site Scripting

    Insufficient input sanitization in the dashboard label or path can allow an attacker to trigger a device error causing information disclosure or data manipulation.

    Advantech DeviceOn/iEdge

Revision history

  1. #1

    Initial Publication

References