Security Advisory

CVE-2026-73172

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-16 12:57:44

Last updated 2026-09-17 18:54:00

Assigner Nozomi

CVSS score 9.3

State PUBLISHED

Description

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the edgserver management service of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to execute arbitrary OS commands as root via crafted requests to TCP port 5058.

← Browse all CVEs View on cve.org ↗