Beveiligingsadvies

CVE-2026-73170

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 12:53:50

Laatst bijgewerkt 2026-09-17 18:52:30

Toegewezen door Nozomi

CVSS-score 8.6

Status PUBLISHED

Beschrijving

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary Lua code on the device via a crafted imported file.

← Alle CVE's bekijken Bekijk op cve.org ↗