Description
Due to insufficient sanitization, an attacker can upload a specially
crafted configuration file to cause a denial-of-service condition,
traverse directories, or read/write files, within the context of the
local system account.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Advantech | DeviceOn/iEdge | ≤ 2.0.2 | — |
Advisories 1
- ICSA-25-310-01 Advantech DeviceOn/iEdge CISA ICS & IT advisories · Nov 6, 2025