Beveiligingsadvies

CVE-2026-73173

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 12:58:45
Laatst bijgewerkt 2026-09-16 12:58:45
Toegewezen door Nozomi
CVSS-score 8.8
Status PUBLISHED

Beschrijving

Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to invoke critical device-management functions, including network reconfiguration, reboot, reset, and firmware upgrade, by sending crafted requests to TCP port 5058.