High severity8.8NVD Advisory· Published Nov 6, 2025· Updated Jun 17, 2026
CVE-2025-58423
CVE-2025-58423
Description
Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to cause a denial-of-service condition, traverse directories, or read/write files, within the context of the local system account.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
30+ 1 more
- (no CPE)range: 0
- cpe:2.3:a:advantech:deviceon\/iedge:*:*:*:*:*:*:*:*range: <=2.0.2
Patches
Vulnerability mechanics
References
3- github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-310-01.jsonnvdThird Party Advisory
- www.cisa.gov/news-events/ics-advisories/icsa-25-310-01nvdMitigationThird Party AdvisoryUS Government Resource
- www.advantech.com/emt/contactnvdProduct
News mentions
0No linked articles in our index yet.