CVE-2025-48468

Successful exploitation of the vulnerability could allow an attacker that has physical access to interface with JTAG to inject or modify firmware.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:advantech:wise-4010lan_firmware:2.02b00:*:*:*:*:*:*:*
cpe:2.3:h:advantech:wise-4010lan:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:advantech:wise-4050lan_firmware:2.02b00:*:*:*:*:*:*:*
cpe:2.3:h:advantech:wise-4050lan:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:advantech:wise-4060lan_firmware:2.02b00:*:*:*:*:*:*:*
cpe:2.3:h:advantech:wise-4060lan:-:*:*:*:*:*:*:*

History

09 Jul 2025, 15:20

Type Values Removed Values Added
CPE cpe:2.3:h:advantech:wise-4050lan:-:*:*:*:*:*:*:*
cpe:2.3:h:advantech:wise-4060lan:-:*:*:*:*:*:*:*
cpe:2.3:o:advantech:wise-4010lan_firmware:2.02b00:*:*:*:*:*:*:*
cpe:2.3:o:advantech:wise-4050lan_firmware:2.02b00:*:*:*:*:*:*:*
cpe:2.3:o:advantech:wise-4060lan_firmware:2.02b00:*:*:*:*:*:*:*
cpe:2.3:h:advantech:wise-4010lan:-:*:*:*:*:*:*:*
References () https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061 - () https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061 - Vendor Advisory
First Time Advantech
Advantech wise-4060lan Firmware
Advantech wise-4050lan Firmware
Advantech wise-4060lan
Advantech wise-4050lan
Advantech wise-4010lan
Advantech wise-4010lan Firmware

25 Jun 2025, 14:15

Type Values Removed Values Added
CWE CWE-1191
Summary
  • (es) La explotación exitosa de la vulnerabilidad podría permitir que un atacante con acceso físico a la interfaz con JTAG inyecte o modifique el firmware.

24 Jun 2025, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-06-24 03:15

Updated : 2025-07-09 15:20


NVD link : CVE-2025-48468

Mitre link : CVE-2025-48468

CVE.ORG link : CVE-2025-48468


JSON object : View

Products Affected

advantech

  • wise-4050lan
  • wise-4060lan
  • wise-4010lan
  • wise-4050lan_firmware
  • wise-4060lan_firmware
  • wise-4010lan_firmware
CWE
CWE-1191

On-Chip Debug and Test Interface With Improper Access Control