EKI-1242EIMS vulnerabilities

14 known vulnerabilities in EKI-1242EIMS from Advantech. 14 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  EKI-1242IEIMS: Insufficient Verification of Data Authenticity

  CVE-2026-73177Sep 16, 2026Advantech

  Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01. The device accepts firmware images through the authenticated w

• 8.6 High severity

  EKI-1242IEIMS: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-73176Sep 16, 2026AdvantechEPSS 1.18%

  Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote auth

• 7.1 High severity

  EKI-1242IEIMS: Uncontrolled Resource Consumption

  CVE-2026-73175Sep 16, 2026Advantech

  Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows an adjacent unauthenticated attacker to exhaust the server session poo

• 8.7 High severity

  EKI-1242IEIMS: Cleartext Transmission of Sensitive Information

  CVE-2026-73174Sep 16, 2026Advantech

  Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a network-adjacent passive observer to intercept ma

• 8.8 High severity

  EKI-1242IEIMS: Missing Authentication for Critical Functionality

  CVE-2026-73173Sep 16, 2026Advantech

  Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to invoke critical d

• 9.3 Critical severity

  EKI-1242IEIMS: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-73172Sep 16, 2026AdvantechEPSS 2.19%

  Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the edgserver management service of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote u

• 8.6 High severity

  EKI-1242IEIMS: External Control of File Name or Path

  CVE-2026-73171Sep 16, 2026Advantech

  Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to overwrite arbitrary files on the

• 8.6 High severity

  EKI-1242IEIMS: Improper Control of Generation of Code

  CVE-2026-73170Sep 16, 2026Advantech

  Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute ar

• 8.6 High severity

  EKI-1242IEIMS: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-73167Sep 16, 2026AdvantechEPSS 1.18%

  Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote auth

• 8.6 High severity

  EKI-1242IEIMS: Improper Control of Generation of Code

  CVE-2026-73166Sep 16, 2026Advantech

  Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arb

• 8.6 High severity

  EKI-1242IEIMS: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-73165Sep 16, 2026AdvantechEPSS 1.18%

  Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote auth

• 8.6 High severity

  EKI-1242IEIMS: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-73164Sep 16, 2026AdvantechEPSS 1.18%

  Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote auth

• 8.6 High severity

  EKI-1242IEIMS: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-73163Sep 16, 2026AdvantechEPSS 1.18%

  Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote auth

• 8.6 High severity

  EKI-1242IEIMS: Cross-Site Request Forgery

  CVE-2026-19535Sep 16, 2026Advantech

  Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to perform unauthorized st