PatchTheCVEwise-deviceon server vulnerabilities and fixes
Recent CVEs affecting wise-deviceon server, with upgrade or downgrade steps. 11 tracked.
Also searched as: wise deviceon server, wise-deviceonserver.
wise-deviceon server has 11 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 11. Most recent: 2025-12-05. Highest priority: CVE-2025-34256 (score 52/100).
- CVE-2025-34259 MEDIUM 5.4 UPGRADE Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability
- CVE-2025-34260 MEDIUM 5.4 UPGRADE Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability
- CVE-2025-34261 MEDIUM 5.4 UPGRADE Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability
- CVE-2025-34258 MEDIUM 5.4 UPGRADE Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability
- CVE-2025-34262 MEDIUM 5.4 UPGRADE Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability
- CVE-2025-34263 MEDIUM 5.4 UPGRADE Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability
- CVE-2025-34264 MEDIUM 5.4 UPGRADE Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability
- CVE-2025-34265 MEDIUM 5.4 UPGRADE Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability
- CVE-2025-34266 MEDIUM 5.4 UPGRADE Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability
- CVE-2025-34257 MEDIUM 5.4 UPGRADE Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability
- CVE-2025-34256 CRITICAL 9.8 UPGRADE Advantech WISE-DeviceOn Server versions prior to 5.4 contain a hard-coded cryptographic key vulnerability
FAQ
How do I fix wise-deviceon server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wise-deviceon server being exploited right now?
None of the tracked wise-deviceon server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wise-deviceon server CVE should I patch first?
CVE-2025-34256 currently ranks highest (52/100): Advantech WISE-DeviceOn Server versions prior to 5.4 contain a hard-coded cryptographic key vulnerability.