Is CVE-2025-48470 actively exploited?

No active exploitation of CVE-2025-48470 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-48470 be exploited remotely?

Partially. CVE-2025-48470 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2025-48470?

CVE-2025-48470 has a CVSS score of 4.1 (MEDIUM).

HOME VULNERABILITIESCVE-2025-48470

MEDIUM

CVE-2025-48470

CWE-79Published: June 24, 2025· Updated: Jun 17, 2026

4.1

CVSS v3.1

Official Description

Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scripts into device fields and executed in other users’ browser, potentially leading to session hijacking, defacement, credential theft, or privilege escalation.

NVD Source

Technical Analysis

CVE-2025-48470 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

From a weakness classification perspective (CWE-79): Cross-site scripting (XSS) vulnerabilities allow attackers to inject malicious scripts into web pages viewed by other users.