PT-2026-93725 · Advantech · Eki-1242Eims

CVE-2026-73175

·

Published

2026-09-16

·

Updated

2026-09-23

CVSS v4.0

7.1

High

VectorAV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions Advantech EKI-1242EIMS version V1.06.01
Description The OPC UA gateway component contains an uncontrolled resource consumption issue. An unauthenticated adjacent attacker can open multiple anonymous sessions to exhaust the server session pool, resulting in a complete denial of service for all legitimate OPC UA clients.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-73175

Affected Products

Eki-1242Eims