Description
Due to insufficient sanitization, an attacker can upload a specially
crafted configuration file to traverse directories and achieve remote
code execution with system-level permissions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Advantech | DeviceOn/iEdge | ≤ 2.0.2 | — |
Advisories 1
- ICSA-25-310-01 Advantech DeviceOn/iEdge CISA ICS & IT advisories · Nov 6, 2025