Eki 1242Ieims
Approved changes feed: RSS · Atom
cpe:2.3:a:advantech:eki-1242ieims:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Advantech (fedf766b-bee1-5692-bcc7-1aa8d9dc594c) |
|---|---|
| Product | Eki 1242Ieims (50e9ac9d-fe9b-5ea8-af5a-47ea800a4ada) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-19535 |
vulnerable | 2026-10-13 12:30:00.922041 |
Details available
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to perform unauthorized state-changing requests on behalf of a logged-in administrator, enabling unauthorized access to privileged management functions.
Published: 2026-09-16T12:35:36.304Z
Updated: 2026-09-17T18:47:44.061Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73166 |
vulnerable | 2026-10-13 12:28:55.318611 |
Details available
Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS commands as root.
Published: 2026-09-16T12:50:15.751Z
Updated: 2026-09-17T19:11:05.990Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73176 |
vulnerable | 2026-10-13 12:28:55.270497 |
Details available
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.
Published: 2026-09-16T13:03:07.461Z
Updated: 2026-09-17T18:58:32.508Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73172 |
vulnerable | 2026-10-13 12:28:55.238800 |
Details available
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the edgserver management service of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to execute arbitrary OS commands as root via crafted requests to TCP port 5058.
Published: 2026-09-16T12:57:44.107Z
Updated: 2026-09-17T18:54:00.909Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73177 |
vulnerable | 2026-10-13 12:28:55.197018 |
Details available
Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01. The device accepts firmware images through the authenticated web management interface without performing any cryptographic signature or certificate verification. An authenticated administrator-level attacker can install arbitrary modified firmware on the device, enabling full persistent compromise of the platform.
Published: 2026-09-16T13:03:44.204Z
Updated: 2026-09-17T18:59:04.930Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73173 |
vulnerable | 2026-10-13 12:28:55.155472 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73167 |
vulnerable | 2026-10-13 12:28:55.111681 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73163 |
vulnerable | 2026-10-13 12:28:55.074435 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73175 |
vulnerable | 2026-10-13 12:28:55.040837 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73169 |
vulnerable | 2026-10-13 12:28:55.039443 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73171 |
vulnerable | 2026-10-13 12:28:55.023011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73165 |
vulnerable | 2026-10-13 12:28:54.964172 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73164 |
vulnerable | 2026-10-13 12:28:54.905504 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73174 |
vulnerable | 2026-10-13 12:28:54.863977 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73170 |
vulnerable | 2026-10-13 12:28:54.843477 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.