Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-58423

Advantech DeviceOn/iEdge Path Traversal

Description

Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to cause a denial-of-service condition, traverse directories, or read/write files, within the context of the local system account.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Advantech DeviceOn/iEdge

Default version status: unaffected

  • 0 to ≤ 2.0.2affected

References