CVE-2026-73172 in EKI-1242EIMS
Riassunto
di MITRE • 16/09/2026
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the edgserver management service of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to execute arbitrary OS commands as root via crafted requests to TCP port 5058.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.