CVE-2025-59171

Опубликовано: 06 нояб. 2025

Источник: nvd

CVSS3: 7.5

CVSS3: 9.8

EPSS Низкий

Описание

Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions.

Ссылки

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-310-01.json
Third Party Advisory
https://www.advantech.com/emt/contact
Product
https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-01
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:advantech:deviceon\/iedge:*:*:*:*:*:*:*:*

Версия до 2.0.2 (включая)

EPSS

Процентиль: 30%

0.00111

Низкий

7.5 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-22

Связанные уязвимости

GHSA-22f5-36q8-782w

CVSS3: 7.5

github

3 месяца назад

Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions.

EPSS

Процентиль: 30%

0.00111

Низкий

7.5 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-22