Security Advisory

CVE-2026-73170

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-16 12:53:50

Last updated 2026-09-17 18:52:30

Assigner Nozomi

CVSS score 8.6

State PUBLISHED

Description

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary Lua code on the device via a crafted imported file.

← Browse all CVEs View on cve.org ↗