Vulnerability Description
Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Advantech | Wise-4060Lan Firmware | 2.02b00 |
| Advantech | Wise-4060Lan | - |
| Advantech | Wise-4050Lan Firmware | - |
| Advantech | Wise-4050Lan | - |
| Advantech | Wise-4010Lan Firmware | - |
| Advantech | Wise-4010Lan | - |
Related Weaknesses (CWE)
References
- https://github.com/shipcod3/CVE-2025-48466ExploitThird Party Advisory
- https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061Third Party Advisory
FAQ
What is CVE-2025-48466?
CVE-2025-48466 is a vulnerability with a CVSS score of 8.1 (HIGH). Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay chan...
How severe is CVE-2025-48466?
CVE-2025-48466 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-48466?
Check the references section above for vendor advisories and patch information. Affected products include: Advantech Wise-4060Lan Firmware, Advantech Wise-4060Lan, Advantech Wise-4050Lan Firmware, Advantech Wise-4050Lan, Advantech Wise-4010Lan Firmware.