Advantech Deviceon\/Iedge vulnerabilities

5 vulnerabilities

Known vulnerabilities in Advantech Deviceon\/Iedge, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2021-40389advantechdeviceon\/iedge
EPSS score
0.36%
A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iEdge Server 1.0.2. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability.9.8CVE-2025-59171advantechdeviceon\/iedge
EPSS score
0.76%
Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions.9.8CVE-2025-62630advantechdeviceon\/iedge
EPSS score
0.73%
Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions.8.8CVE-2025-58423advantechdeviceon\/iedge
EPSS score
0.56%
Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to cause a denial-of-service condition, traverse directories, or read/write files, within the context of the local system account.6.4CVE-2025-64302advantechdeviceon\/iedge
EPSS score
0.24%
Insufficient input sanitization in the dashboard label or path can allow an attacker to trigger a device error causing information disclosure or data manipulation.