NULL Pointer Dereference in License Manager Service

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.

Heap-Based Buffer Overflow in Advantech ADAM-3600 Allows Arbitrary Code Execution

A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.

Null Pointer Dereference Causing Service Crash in Advantech ADAM-3600 License Manager

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.

Authenticated Path Traversal Vulnerability Enabling Arbitrary File Read on Advantech ADAM-3600

A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.

Heap Memory Read Allows Sensitive Data Exfiltration in Advantech ADAM-3600

A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.

Brute-Force Administrator Password Vulnerability in Advantech ADAM‑3600 Proprietary Protocol

A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.

Stack‑Based Buffer Overflow Vulnerability in Advantech ADAM‑3600

A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.

Authentication Bypass in the Proprietary Protocol of Advantech ADAM-3600

A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.

NULL Pointer Dereference in Logs Management Functionality

A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.

Buffer Overflow in Advantech ADAM‑3600 Password Verification Enables Code Execution with Guest Authentication

A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.

OS Command Injection in Advantech EKI-1242 Firmware

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.

OS Command Injection via Web Interface on Advantech EKI‑1242IEIMS

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.

OS Command Injection in Advantech EKI-1242IEIMS Web Interface Allows Remote Root Execution

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.

Remote Code Execution via Lua Injection in Advantech Modbus CSV Import

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary Lua code on the device via a crafted imported file.

Unauthenticated Management Control in Advantech EKI-1242 Firmware via TCP 5058

Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to invoke critical device-management functions, including network reconfiguration, reboot, reset, and firmware upgrade, by sending crafted requests to TCP port 5058.

OS Command Injection in Advantech EKI-1242IEIMS Firmware v1.06.01 Allows Remote Authenticated Attacker to Execute Commands as Root

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.

Cross‑Site Request Forgery in LuCI Admin Interface of Advantech EKI‑1242IEIMS

Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to perform unauthorized state-changing requests on behalf of a logged-in administrator, enabling unauthorized access to privileged management functions.

Advantech EKI‑1242IEIMS Firmware 1.06.01 Remote OS Command Injection Allowing Root Execution

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.

Remote Code Injection Vulnerability in Advantech EKI-1242IEIMS Firmware V1.06.01

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS commands as root.