Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-64302

Advantech DeviceOn/iEdge Cross-site Scripting

Description

Insufficient input sanitization in the dashboard label or path can allow an attacker to trigger a device error causing information disclosure or data manipulation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Advantech DeviceOn/iEdge

Default version status: unaffected

  • 0 to ≤ 2.0.2affected

References