Description
Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.
Metrics
CVSS 3.1 8.1/10
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Advantech | Advantech Wireless Sensing and Equipment (WISE) | A2.01 B00 |
References
- https://github.com/shipcod3/CVE-2025-48466Exploit, Third Party Advisory
- https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061Third Party Advisory
Timeline
- Published
- Jun 24, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed