EUVD-2025-28231Severity by source
AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload firmware through a public update page, potentially leading to backdoor installation or privilege escalation.
AnalysisAI
A privilege escalation vulnerability (CVSS 9.6) that allows an unauthenticated attacker. Risk factors: public PoC available.
Technical ContextAI
CWE-306 (Missing Authentication). CVSS 9.6 indicates critical severity with likely remote exploitation vector.
RemediationAI
Monitor vendor channels for patch availability. Restrict network access to affected components and enable MFA as interim mitigation.
More in Wise 4010lan Firmware
View allCVE-2025-48466 is a security vulnerability (CVSS 8.1). Risk factors: public PoC available.
Successful exploitation of the vulnerability could allow an attacker to cause repeated reboots, potentially leading to r
A security vulnerability in Successful exploitation of the vulnerability could allow an attacker that (CVSS 6.4) that al
A remote code execution vulnerability (CVSS 5.0) that allows an unauthenticated attacker. Remediation should follow stan
Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block ot
Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scr
Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today