CVE-2026-73173 : 상세 정보

CVE-2026-73173

2026-09-16
13h18 +00:00
Authorization problems
A07-Identif. and Authent. Fail
2026-09-23
11h10 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to invoke critical device-management functions, including network reconfiguration, reboot, reset, and firmware upgrade, by sending crafted requests to TCP port 5058.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-306 Missing Authentication for Critical Functionality
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

참고 자료