GCVE - cpe:2.3:a:advantech:deviceon\/iedge:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:advantech:deviceon\/iedge:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Advantech (`fedf766b-bee1-5692-bcc7-1aa8d9dc594c`)
Product	Deviceon/Iedge (`24be6bfa-10e0-5434-80c6-5793e28616e8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-64302`	vulnerable	2026-06-08 07:39:18.350781	Advantech DeviceOn/iEdge Cross-site Scripting MEDIUM (6.4) Insufficient input sanitization in the dashboard label or path can allow an attacker to trigger a device error causing information disclosure or data manipulation. Published: 2025-11-06T22:24:15.401Z Updated: 2025-11-07T13:23:28.291Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-01 https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-310-01.json https://www.advantech.com/emt/contact	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-62630`	vulnerable	2026-06-08 07:39:16.294798	Advantech DeviceOn/iEdge Path Traversal HIGH (8.8) Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions. Published: 2025-11-06T22:27:14.439Z Updated: 2025-11-07T14:03:30.791Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-01 https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-310-01.json https://www.advantech.com/emt/contact	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59171`	vulnerable	2026-06-08 07:35:20.683447	Advantech DeviceOn/iEdge Path Traversal HIGH (7.5) Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions. Published: 2025-11-06T22:29:27.309Z Updated: 2025-11-07T14:02:38.873Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-01 https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-310-01.json https://www.advantech.com/emt/contact	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58423`	vulnerable	2026-06-08 07:35:18.241581	Advantech DeviceOn/iEdge Path Traversal HIGH (8.8) Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to cause a denial-of-service condition, traverse directories, or read/write files, within the context of the local system account. Published: 2025-11-06T22:31:02.740Z Updated: 2025-12-01T15:36:29.593Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-01 https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-310-01.json https://www.advantech.com/emt/contact	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.