Security Advisory

CVE-2026-73169

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-16 12:52:50

Last updated 2026-09-16 12:52:50

Assigner Nozomi

CVSS score 6.3

State PUBLISHED

Description

Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Modbus transaction management interface of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to store malicious script content that executes in the browser of any administrator who later opens an affected management page.

← Browse all CVEs View on cve.org ↗