Advantech Deviceon/iedge vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Advantech Deviceon/iedge: 4 record(s), with affected versions and fixes.cpe:2.3:a:advantech:deviceon/iedge
CVE-2025-64302
Medium · 5.4
CWE-79 Nov 6, 2025
Advantech DeviceOn/iEdge Cross-site Scripting
Insufficient input sanitization in the dashboard label or path can allow
an attacker to trigger a device error causing information disclosure or
data manipulation.
CVE-2025-62630
Critical · 9.8
CWE-22 Nov 6, 2025
Advantech DeviceOn/iEdge Path Traversal
Due to insufficient sanitization, an attacker can upload a specially
crafted configuration file to traverse directories and achieve remote
code execution with system-level permissions.
CVE-2025-59171
Critical · 9.8
CWE-22 Nov 6, 2025
Advantech DeviceOn/iEdge Path Traversal
Due to insufficient sanitization, an attacker can upload a specially
crafted configuration file to traverse directories and achieve remote
code execution with system-level permissions.
CVE-2025-58423
High · 8.8
CWE-22 Nov 6, 2025
Advantech DeviceOn/iEdge Path Traversal
Due to insufficient sanitization, an attacker can upload a specially
crafted configuration file to cause a denial-of-service condition,
traverse directories, or read/write files, within the context of the
local system account.