High severity7.5NVD Advisory· Published Nov 6, 2025· Updated Jun 17, 2026
CVE-2025-59171
CVE-2025-59171
Description
Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:advantech:deviceon\/iedge:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:advantech:deviceon\/iedge:*:*:*:*:*:*:*:*range: <=2.0.2
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
3- github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-310-01.jsonnvdThird Party Advisory
- www.cisa.gov/news-events/ics-advisories/icsa-25-310-01nvdMitigationThird Party AdvisoryUS Government Resource
- www.advantech.com/emt/contactnvdProduct
News mentions
0No linked articles in our index yet.