CVE-2023-2575

🗓️ 08 May 2023 12:11:34Reported by CyberDanubeType

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the microprogrammed software of Advantech EKI-1524, EKI-1522, and EKI-1521 allows a perpetrator to execute arbitrary codes.	22 Dec 202300:00	–	bdu_fstec
Circl	CVE-2023-2575	8 May 202316:48	–	circl
CNNVD	Advantech 缓冲区错误漏洞	8 May 202300:00	–	cnnvd
Cvelist	CVE-2023-2575 Authenticated Buffer Overflow	8 May 202312:11	–	cvelist
EUVD	EUVD-2023-34053	3 Oct 202520:07	–	euvd
NVD	CVE-2023-2575	8 May 202313:15	–	nvd
OSV	CVE-2023-2575	8 May 202313:15	–	osv
Packet Storm	Advantech EKI-15XX Series Command Injection / Buffer Overflow	12 May 202300:00	–	packetstorm
Prion	Stack overflow	8 May 202313:15	–	prion
Positive Technologies	PT-2023-7944 · Advantech · Eki-1522 +2	8 May 202300:00	–	ptsecurity

NVD

Node

advantech eki-1521_firmwareRange≤1.21

AND

advantech eki-1521Match-

Node

advantech eki-1522_firmwareRange≤1.21

AND

advantech eki-1522Match-

Node

advantech eki-1524_firmwareRange≤1.21

AND

advantech eki-1524Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "EKI-1524",
    "vendor": "Advantech",
    "versions": [
      {
        "lessThanOrEqual": "1.21",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EKI-1522",
    "vendor": "Advantech",
    "versions": [
      {
        "lessThanOrEqual": "1.21",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EKI-1521",
    "vendor": "Advantech",
    "versions": [
      {
        "lessThanOrEqual": "1.21",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cyberdanube	www.cyberdanube.com/en/multiple-vulnerabilities-in-advantech-eki-15xx-series/
seclists	www.seclists.org/fulldisclosure/2023/May/4
advantech	www.advantech.com/en/support/details/firmware
packetstormsecurity	www.packetstormsecurity.com/files/172307/Advantech-EKI-15XX-Series-Command-Injection-Buffer-Overflow.html
advantech	www.advantech.com/en/support/details/firmware
advantech	www.advantech.com/en/support/details/firmware

17 Jun 2026 05:52Current

8.7High risk

Vulners AI Score8.7

CVSS 3.18.8

EPSS0.16706

SSVC