CVE-2026-73177
2026-09-16
14h17 +00:00
14h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01. The device accepts firmware images through the authenticated web management interface without performing any cryptographic signature or certificate verification. An authenticated administrator-level attacker can install arbitrary modified firmware on the device, enabling full persistent compromise of the platform.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Insufficient Verification of Data Authenticity The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data. |
