CVE-2026-73171
2026-09-16
13h18 +00:00
13h18 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to overwrite arbitrary files on the device filesystem by uploading a crafted backup archive through the web management interface.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| External Control of File Name or Path The product allows user input to control or influence paths or file names that are used in filesystem operations. |
