Vulnerabilidades do Advantech Deviceon/iedge
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Advantech Deviceon/iedge: 4 registro(s), com versões afetadas e correções.cpe:2.3:a:advantech:deviceon/iedge
CVE-2025-64302
Média · 5.4
CWE-79 06/11/2025
Advantech DeviceOn/iEdge Cross-site Scripting
Insufficient input sanitization in the dashboard label or path can allow
an attacker to trigger a device error causing information disclosure or
data manipulation.
CVE-2025-62630
Crítica · 9.8
CWE-22 06/11/2025
Advantech DeviceOn/iEdge Path Traversal
Due to insufficient sanitization, an attacker can upload a specially
crafted configuration file to traverse directories and achieve remote
code execution with system-level permissions.
CVE-2025-59171
Crítica · 9.8
CWE-22 06/11/2025
Advantech DeviceOn/iEdge Path Traversal
Due to insufficient sanitization, an attacker can upload a specially
crafted configuration file to traverse directories and achieve remote
code execution with system-level permissions.
CVE-2025-58423
Alta · 8.8
CWE-22 06/11/2025
Advantech DeviceOn/iEdge Path Traversal
Due to insufficient sanitization, an attacker can upload a specially
crafted configuration file to cause a denial-of-service condition,
traverse directories, or read/write files, within the context of the
local system account.