CVE-2025-48466: advantech advantech wireless sensing and equipment (wise) Incorrect Authorization

Vulnerability summary

CVE-2025-48466 is a high (CVSS 8.1) Incorrect Authorization vulnerability in advantech advantech wireless sensing and equipment (wise). EPSS estimates a 0.56% chance of exploitation in the next 30 days, higher than 45.5% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 24-06-2025
   PublishedVulnerability first disclosed.
2. 25-06-2025
   Last modifiedVulnerability information updated.

Description

Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.

• CWE-863Incorrect AuthorizationThe product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.