Advantech Eki-1524 Firmware vulnerabilities

5 CVEs affecting Advantech Eki-1524 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-4203, published 2023-08-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-2575, published 2023-05-08. High severity, CVSS 8.8. EPSS: 15.5% chance of exploitation in the next 30 days. Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated users via a crafted POST request.
CVE-2023-2574, published 2023-05-08. High severity, CVSS 8.8. EPSS: 4.8% chance of exploitation in the next 30 days. Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the device name input field, which can be triggered by authenticated users via a…
CVE-2023-2573, published 2023-05-08. High severity, CVSS 8.8. EPSS: 4.8% chance of exploitation in the next 30 days. Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the NTP server input field, which can be triggered by authenticated users via a…
CVE-2023-4203, published 2023-08-08. Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days. Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the ping tool of the…
CVE-2023-4202, published 2023-08-08. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the device name field of the…