Approved changes feed: RSS · Atom

cpe:2.3:h:advantech:eki-1521:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorAdvantech (fedf766b-bee1-5692-bcc7-1aa8d9dc594c)
ProductEki 1521 (2e9e12a2-6324-5445-b818-b7b26e3da61e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4203 not_vulnerable 2026-06-03 14:53:27.517473 Stored Cross-Site Scripting
CRITICAL (9)
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the ping tool of the web-interface.
Published: 2023-08-08T10:29:21.163Z
Updated: 2025-02-13T17:09:16.094Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4203 vulnerable 2026-06-03 14:53:27.517136 Stored Cross-Site Scripting
CRITICAL (9)
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the ping tool of the web-interface.
Published: 2023-08-08T10:29:21.163Z
Updated: 2025-02-13T17:09:16.094Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4202 not_vulnerable 2026-06-03 14:53:27.516480 Stored Cross-Site Scripting
CRITICAL (9)
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the device name field of the web-interface.
Published: 2023-08-08T10:24:40.086Z
Updated: 2025-02-13T17:09:15.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4202 vulnerable 2026-06-03 14:53:27.511962 Stored Cross-Site Scripting
CRITICAL (9)
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the device name field of the web-interface.
Published: 2023-08-08T10:24:40.086Z
Updated: 2025-02-13T17:09:15.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2575 not_vulnerable 2026-06-03 14:51:43.422148 Authenticated Buffer Overflow
HIGH (8.8)
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated users via a crafted POST request.
Published: 2023-05-08T12:11:34.963Z
Updated: 2025-02-13T16:44:37.004Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2574 not_vulnerable 2026-06-03 14:51:43.421447 Authenticated Command Injection
HIGH (8.8)
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the device name input field, which can be triggered by authenticated users via a crafted POST request.
Published: 2023-05-08T12:28:59.918Z
Updated: 2025-02-13T16:44:36.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2573 not_vulnerable 2026-06-03 14:51:43.417497 Authenticated Command Injection
HIGH (8.8)
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the NTP server input field, which can be triggered by authenticated users via a crafted POST request.
Published: 2023-05-08T12:33:06.707Z
Updated: 2025-02-13T16:44:35.870Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.