CNNVD-202506-3034 Information

CNNVD ID

CNNVD-202506-3034

CVE-2025-48466

  • CNNVD Published: 2025-06-24

Description (Chinese)

Advantech WISE-4060LAN是中国台湾研华(Advantech)公司的一个工业自动化控制器。 Advantech多款产品存在安全漏洞,该漏洞源于未经验证的远程攻击者可发送Modbus TCP数据包操纵数字输出,可能导致远程控制继电器通道。以下产品受到影响:WISE-4010LAN、WISE-4050LAN和WISE-4060LAN。

Description (English)

Advantech Wise-4060LAN is an industrial automation controller of the Chinese company Advantech. There is a safety gap in Advantech ’ s multiple products, which stems from uncertified long-range assailants who can send Modbus TCP package to manipulate digital output, which may lead to remote control of relay channels. The following products were affected: WISE-4010LAN, WISE-4050LAN and WISE-4060LAN.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

研华

Published

2025-06-24

Last Modified

2026-02-24

References

https://github.com/shipcod3/CVE-2025-48466 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061

Patch

https://www.advantech.com/en-sg/products/iot-ethernet-i-o-modules-wise-4000lan/sub_da5ad5b2-09b9-418c-9f6a-f4a6e2f8f53a

Share on: