CVE-2025-48466

HIGHCVSS 8.1/10EPSS 0.51%

Last modified

CVE-2025-48466 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.. EPSS estimates a 0.51% chance of exploitation in the next 30 days.

Description

Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.

Metrics

CVSS 3.1
8.1/10

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS Probability
0.51%

39.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
AdvantechWise-4060lan Firmware2.02b00
AdvantechWise-4050lan FirmwareAll versions
AdvantechWise-4010lan FirmwareAll versions

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2025-48466?
Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.
How severe is CVE-2025-48466?
CVE-2025-48466 has a CVSS score of 8.1/10 (HIGH severity). The EPSS model estimates a 0.51% probability of exploitation in the next 30 days.
How do I fix CVE-2025-48466?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2025-48466?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST