Beveiligingsadvies

CVE-2026-73169

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 12:52:50
Laatst bijgewerkt 2026-09-16 12:52:50
Toegewezen door Nozomi
CVSS-score 6.3
Status PUBLISHED

Beschrijving

Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Modbus transaction management interface of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to store malicious script content that executes in the browser of any administrator who later opens an affected management page.