CVE-2026-79697
CriticalCVSS 9.9Summary
A vulnerability was identified in Advantech WISE-6610 devices (multiple models) version 1.2.1_20251110 in the basicstation_apply function of the Basic Station Certificate-Deletion Handler component. Manipulation of the argument act causes command injection. The attack can be initiated remotely and the exploit is publicly disclosed. The vendor released a fix in version 1.2.4_20260821.
Risk Assessment
A remote attacker could exploit this vulnerability to execute unauthorized system commands, potentially leading to device takeover and disruption of operations.
Recommendation
Update Advantech WISE-6610 devices to version 1.2.4_20260821 or later as soon as possible.
Other vulnerabilities in Advantech WISE-6610
See all- CVE-2026-79698Critical
A vulnerability was identified in Advantech WISE-6610 devices (multiple models) version 1.2.1_20251110 in the nodered_lib_apply function of the Node-RED Library component. Manipulation of the argument act leads to command injection. The attack can be launched remotely and the exploit is publicly available. The vendor released a fix in version 1.2.4_20260821.
- CVE-2026-2670High
A vulnerability was identified in Advantech WISE-6610 devices (multiple models) version 1.2.1_20251110 in an unknown function of the file /cgi-bin/luci/admin/openvpn_apply in the Background Management component. Manipulation of the argument delete_file leads to OS command injection. The attack can be executed remotely and the exploit is publicly available. The vendor released a fix in version 1.2.4_20260821.
Original NVD description (English source)
A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251110. This affects the function basicstation_apply of the component Basic Station Certificate-Deletion Handler. This manipulation of the argument act causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.2.4_20260821 is able to mitigate this issue. Upgrading the affected component is advised. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.