PT-2026-93727 · Advantech · Eki-1242Eims

CVE-2026-73177

·

Published

2026-09-16

·

Updated

2026-09-16

CVSS v4.0

8.6

High

VectorAV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Advantech EKI-1242EIMS version V1.06.01
Description The firmware upgrade mechanism fails to perform cryptographic signature or certificate verification when accepting firmware images through the authenticated web management interface. This allows an authenticated administrator-level attacker to install modified firmware, leading to a full persistent compromise of the platform.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2026-73177

Affected Products

Eki-1242Eims