EKI-1524 vulnerabilities

3 known vulnerabilities in EKI-1524 from Advantech. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  EKI-1524: Out-of-bounds Write

  CVE-2023-2575May 8, 2023AdvantechEPSS 15.5%

  Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated users via a crafted POST request.

• 8.8 High severity

  EKI-1524: Improper Neutralization of Special Elements used in a Command

  CVE-2023-2574May 8, 2023AdvantechEPSS 4.75%

  Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the device name input field, which can be triggered by authenticated users via a crafted POST request.

• 8.8 High severity

  EKI-1524: Improper Neutralization of Special Elements used in a Command

  CVE-2023-2573May 8, 2023AdvantechEPSS 4.75%

  Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the NTP server input field, which can be triggered by authenticated users via a crafted POST request.