Advantech Eki-1242ieims vulnerabilities

15 CVEs affecting Advantech Eki-1242ieims, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-73177, published 2026-09-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-73172, published 2026-09-16. Critical severity, CVSS 9.3. EPSS: 2.2% chance of exploitation in the next 30 days. Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the edgserver management service of Advantech…
CVE-2026-73176, published 2026-09-16. High severity, CVSS 8.6. EPSS: 1.2% chance of exploitation in the next 30 days. Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech…
CVE-2026-73167, published 2026-09-16. High severity, CVSS 8.6. EPSS: 1.2% chance of exploitation in the next 30 days. Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech…
CVE-2026-73165, published 2026-09-16. High severity, CVSS 8.6. EPSS: 1.2% chance of exploitation in the next 30 days. Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech…
CVE-2026-73164, published 2026-09-16. High severity, CVSS 8.6. EPSS: 1.2% chance of exploitation in the next 30 days. Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech…
CVE-2026-73163, published 2026-09-16. High severity, CVSS 8.6. EPSS: 1.2% chance of exploitation in the next 30 days. Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech…
CVE-2026-73173, published 2026-09-16. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that…
CVE-2026-73166, published 2026-09-16. High severity, CVSS 8.6. EPSS: 0.7% chance of exploitation in the next 30 days. Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version…
CVE-2026-73170, published 2026-09-16. High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days. Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in firmware version…
CVE-2026-73169, published 2026-09-16. Medium severity, CVSS 6.3. EPSS: 0.5% chance of exploitation in the next 30 days. Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Modbus transaction management interface of…

Latest

CVE-2026-73177, published 2026-09-16. High severity, CVSS 8.6. EPSS: 0.1% chance of exploitation in the next 30 days. Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01.…
CVE-2026-73175, published 2026-09-16. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows an…
CVE-2026-73174, published 2026-09-16. High severity, CVSS 8.7. EPSS: 0.2% chance of exploitation in the next 30 days. Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01…
CVE-2026-73171, published 2026-09-16. High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days. Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a…