Beveiligingsadvies

CVE-2026-73177

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 13:03:44

Laatst bijgewerkt 2026-09-16 13:03:44

Toegewezen door Nozomi

CVSS-score 8.6

Status PUBLISHED

Beschrijving

Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01. The device accepts firmware images through the authenticated web management interface without performing any cryptographic signature or certificate verification. An authenticated administrator-level attacker can install arbitrary modified firmware on the device, enabling full persistent compromise of the platform.

← Alle CVE's bekijken Bekijk op cve.org ↗