Skip to content
OpenAdvisories
Medium · 6.4 CVE-2025-64302 EUVD-2025-38191GHSA-jq2j-98mw-mwjp

Advantech DeviceOn/iEdge Cross-site Scripting

Published Nov 6, 2025 · Updated Nov 7, 2025 · Assigned by icscert

Description

Insufficient input sanitization in the dashboard label or path can allow
an attacker to trigger a device error causing information disclosure or
data manipulation.

Affected products

VendorProductAffectedFixed
Advantech DeviceOn/iEdge ≤ 2.0.2 —

Advisories 1

References