CVE-2025-48469 — Unauthenticated Firmware Upload

CVE-2025-48469

Unauthenticated Firmware Upload PUBLISHED

Description (CNA)

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload firmware through a public update page, potentially leading to backdoor installation or privilege escalation.

Affected (CNA)

Vendor / product	Versions
Advantech / Advantech Wireless Sensing and Equipment (WISE)	affected A2.01 B00

CWE

No CWE identifiers supplied.

References

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061/
https://jro.sg/CVEs/CVE-2025-48469/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.