Skip to content
OpenAdvisories

Product · Advantech

Advantech Wireless Sensing and Equipment (WISE)

8 known vulnerabilities.

Advantech Wireless Sensing and Equipment (WISE) at a glance

Last 12 months
0
Critical · all time
1
Exploited · all time
0
Public exploit · all time
2
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202581
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Medium 4.1
    CVE-2025-48470

    Stored Cross site Scripting (XSS)

    Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scripts into device fields and executed in other users’ browser, potentially leading to session hijacking, defacement, credential theft, or pr…

    Advantech Advantech Wireless Sensing and Equipment (WISE)
  • Critical 9.6
    CVE-2025-48469

    Unauthenticated Firmware Upload

    Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload firmware through a public update page, potentially leading to backdoor installation or privilege escalation.

    Advantech Advantech Wireless Sensing and Equipment (WISE)
  • Medium 6.4
    CVE-2025-48468

    Open JTAG Debug Port

    Successful exploitation of the vulnerability could allow an attacker that has physical access to interface with JTAG to inject or modify firmware.

    Advantech Advantech Wireless Sensing and Equipment (WISE)
  • Medium 6.5
    CVE-2025-48467

    Denial of Service via Malformed Modbus Packets

    Successful exploitation of the vulnerability could allow an attacker to cause repeated reboots, potentially leading to remote denial-of-service and system unavailability.

    Advantech Advantech Wireless Sensing and Equipment (WISE)
  • High 8.1
    CVE-2025-48466 Public exploit

    Modbus Command Injection without Authentication

    Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.

    Advantech Advantech Wireless Sensing and Equipment (WISE)
  • Low 3.1
    CVE-2025-48463

    Unencrypted HTTP Communication

    Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted HTTP communication, potentially leading to unauthorised access or data tamperin…

    Advantech Advantech Wireless Sensing and Equipment (WISE)
  • Medium 4.2
    CVE-2025-48462

    Login Session Exhaustion

    Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block other users from logging in, thereby preventing legitimate users from gaining access to the product.

    Advantech Advantech Wireless Sensing and Equipment (WISE)
  • Medium 5.0
    CVE-2025-48461 Public exploit

    Weak Session Cookie Entropy

    Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset p…

    Advantech Advantech Wireless Sensing and Equipment (WISE)