Advantech Eki-1322 Series Firmware vulnerabilities

2 CVEs affecting Advantech Eki-1322 Series Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-7938, published 2016-01-09.

More from Advantech.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-7938, published 2016-01-09. Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days. Advantech EKI-132x devices with firmware before 2015-12-31 allow remote attackers to bypass authentication via unspecified vectors.
• CVE-2015-6476, published 2015-11-07. High severity, CVSS 10.0. EPSS: 2.3% chance of exploitation in the next 30 days. Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which makes it easier for…