Eki 1242Eims
Approved changes feed: RSS · Atom
cpe:2.3:a:advantech:eki-1242eims:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Advantech (fedf766b-bee1-5692-bcc7-1aa8d9dc594c) |
|---|---|
| Product | Eki 1242Eims (18ec4d78-1613-55fd-ba97-4635560026c5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-19535 |
vulnerable | 2026-10-13 12:30:00.922911 |
Details available
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to perform unauthorized state-changing requests on behalf of a logged-in administrator, enabling unauthorized access to privileged management functions.
Published: 2026-09-16T12:35:36.304Z
Updated: 2026-09-17T18:47:44.061Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73166 |
vulnerable | 2026-10-13 12:28:55.319215 |
Details available
Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS commands as root.
Published: 2026-09-16T12:50:15.751Z
Updated: 2026-09-17T19:11:05.990Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73176 |
vulnerable | 2026-10-13 12:28:55.271111 |
Details available
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.
Published: 2026-09-16T13:03:07.461Z
Updated: 2026-09-17T18:58:32.508Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73172 |
vulnerable | 2026-10-13 12:28:55.239415 |
Details available
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the edgserver management service of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to execute arbitrary OS commands as root via crafted requests to TCP port 5058.
Published: 2026-09-16T12:57:44.107Z
Updated: 2026-09-17T18:54:00.909Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73177 |
vulnerable | 2026-10-13 12:28:55.197646 |
Details available
Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01. The device accepts firmware images through the authenticated web management interface without performing any cryptographic signature or certificate verification. An authenticated administrator-level attacker can install arbitrary modified firmware on the device, enabling full persistent compromise of the platform.
Published: 2026-09-16T13:03:44.204Z
Updated: 2026-09-17T18:59:04.930Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73173 |
vulnerable | 2026-10-13 12:28:55.156076 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73167 |
vulnerable | 2026-10-13 12:28:55.112276 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73163 |
vulnerable | 2026-10-13 12:28:55.075268 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73175 |
vulnerable | 2026-10-13 12:28:55.041407 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73169 |
vulnerable | 2026-10-13 12:28:55.040037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73171 |
vulnerable | 2026-10-13 12:28:55.023627 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73165 |
vulnerable | 2026-10-13 12:28:54.964861 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73164 |
vulnerable | 2026-10-13 12:28:54.906122 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73174 |
vulnerable | 2026-10-13 12:28:54.864569 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73170 |
vulnerable | 2026-10-13 12:28:54.845526 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.