Search vulnerabilities

Results 5

Export CSV
CVE-2023-4203

Stored Cross-Site Scripting

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the ping tool of the web-interface.

CVSS 3.1 · 9 Critical EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2023-4202

Stored Cross-Site Scripting

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the device name field of the web-interface.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2023-2574

Authenticated Command Injection

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the device name input field, which can be triggered by authenticated users via a crafted POST request.

CVSS 3.1 · 8.8 High EPSS 4.8% KEV · Not listed
Vendors
Products
CVE-2023-2573

Authenticated Command Injection

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the NTP server input field, which can be triggered by authenticated users via a crafted POST request.

CVSS 3.1 · 8.8 High EPSS 4.8% KEV · Not listed
Vendors
Products
CVE-2023-2575

Authenticated Buffer Overflow

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated users via a crafted POST request.

CVSS 3.1 · 8.8 High EPSS 15.5% KEV · Not listed
Vendors
Products