Skip to content
OpenAdvisories

Product · Advantech

WISE-DeviceOn Server

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2025-34256

    Advantech WISE-DeviceOn Server < 5.4 Hard-coded JWT Key Authentication Bypass

    Advantech WISE-DeviceOn Server versions prior to 5.4 contain a hard-coded cryptographic key vulnerability. The product uses a static HS512 HMAC secret for signing EIRMMToken JWTs across all installations. The server accepts forged JWTs that need only contain …

    Advantech WISE-DeviceOn Server