CVE-2026-73166
CVE-2026-73166
Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS commands as root.
Vulnerability class: RCE (Remote Code Execution)
Weakness classification (CWE)
References
- prodsec@nozominetworks.com (third-party-advisory)
- prodsec@nozominetworks.com (vendor-advisory)