VulnerabilityAnalyzed
CVE-2025-48463
Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted HTTP communication, potentially leading to unauthorised access or data…
LOW 3.1EPSS 0.11%
Does this matter?
Lower severity and a low EPSS score (0.11%). Track it; it rarely justifies an emergency change on its own.
Description
Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted HTTP communication, potentially leading to unauthorised access or data tampering.
- CVSS 3.1
- 3.1 LOWCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.11% probability · 2th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-312
- Affected
- advantech/wise-4060lan firmware · advantech/wise-4050lan firmware · advantech/wise-4010lan firmware
- Source
- 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
References
- https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.