CVE-2023-2575

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated users via a crafted POST request...

CVE-2023-2573

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the NTP server input field, which can be triggered by authenticated users via a crafted POST request...

CVE-2023-2574

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the device name input field, which can be triggered by authenticated users via a crafted POST request...

CVE-2023-2573

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the NTP server input field, which can be triggered by authenticated users via a crafted POST request...

CVE-2023-2574

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the device name input field, which can be triggered by authenticated users via a crafted POST request...

Command injection

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the device name input field, which can be triggered by authenticated users via a crafted POST request...

Command injection

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the NTP server input field, which can be triggered by authenticated users via a crafted POST request...

CVE-2023-2573

The CVE-2023-2573 issue affects Advantech EKI-1521/1522/1524 devices up to firmware 1.21. The vulnerability is a command injection in the NTP server input field that can be triggered by authenticated users via a crafted POST request, exposing confidentiality, integrity, and availability (CVSS v3....

CVE-2023-2574 Authenticated Command Injection

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the device name input field, which can be triggered by authenticated users via a crafted POST request...

CVE-2023-2574 Authenticated Command Injection

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the device name input field, which can be triggered by authenticated users via a crafted POST request...

CVE-2023-2574

The CVE-2023-2574 entry affects Advantech EKI-1524, EKI-1522, and EKI-1521 devices up to firmware version 1.21, where an authenticated user can trigger a command injection through the device-name input in a crafted POST request. Concrete details in connected sources indicate vulnerable versions (...

CVE-2023-2575

Advantech EKI-1524, EKI-1522, and EKI-1521 devices up to firmware version 1.21 are affected by a stack-based buffer overflow that can be triggered by an authenticated user via a crafted POST request. The issue is documented as CVE-2023-2575. A public write-up from CyberDanube/PacketStorm confirms...

CVE-2023-2575 Authenticated Buffer Overflow

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated users via a crafted POST request...

CVE-2023-2575 Authenticated Buffer Overflow

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated users via a crafted POST request...

Advantech 缓冲区错误漏洞

Advantech, a China-based Advantech company, provides intelligent electric bus management systems for applications. A security vulnerability exists in Advantech EKI-1524, EKI-1522, EKI-1521 version 1.21 and prior versions, which stems from the discovery of a vulnerability containing a buffer...

Advantech 命令注入漏洞

Advantech, a China-based Advantech application, provides intelligent electric bus management systems. A security vulnerability exists in Advantech EKI-1524, EKI-1522, EKI-1521 version 1.21 and prior versions, which stems from the discovery of a command injection vulnerability included...

Advantech 命令注入漏洞

Advantech, a China-based Advantech application, provides intelligent electric bus management systems. A security vulnerability exists in Advantech EKI-1524, EKI-1522, EKI-1521 version 1.21 and prior versions, which stems from the discovery of a command injection vulnerability included...

eki-vie.com Cross Site Scripting vulnerability OBB-2992963

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

term.eki.ee Cross Site Scripting vulnerability OBB-2559110

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Denial of Service Vulnerability in EKI-1521-CE Serial Port Server Private Configuration Protocol

The EKI-15121-CE is a serial device networking server that sends private configuration protocols to device ports. A denial of service vulnerability exists in EKI-1521-CE, which can be exploited by an attacker to launch a denial of service attack...