CVE-2026-73166
HighCVSS 8.6Summary
A CWE-94 code injection vulnerability was identified in the web management interface of Advantech EKI-1242IEIMS firmware V1.06.01. A remote authenticated attacker can execute arbitrary code on the device, including OS commands as root.
Risk Assessment
An authenticated attacker can execute arbitrary code and commands as root, leading to full device takeover and a serious network security breach.
Recommendation
Update the firmware to a non-vulnerable version, restrict administrative access, and monitor for unusual device activity.
Other vulnerabilities in Advantech EKI-1242IEIMS
See all- CVE-2026-73176High
A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.
- CVE-2026-73167High
A CWE-78 OS command injection vulnerability was identified in the web management interface of Advantech EKI-1242IEIMS firmware V1.06.01. A remote authenticated attacker can execute arbitrary OS commands as root via crafted request parameters.
- CVE-2026-73165High
A CWE-78 OS command injection vulnerability was identified in the web management interface of Advantech EKI-1242IEIMS firmware V1.06.01. A remote authenticated attacker can execute arbitrary OS commands as root via crafted request parameters.
- CVE-2026-73164High
A CWE-78 OS command injection vulnerability was identified in the web management interface of Advantech EKI-1242IEIMS firmware V1.06.01. A remote authenticated attacker can execute arbitrary OS commands as root via crafted request parameters.
- CVE-2026-73163High
A CWE-78 OS command injection vulnerability was identified in the web management interface of Advantech EKI-1242IEIMS firmware V1.06.01. A remote authenticated attacker can execute arbitrary OS commands as root via crafted request parameters.
- CVE-2026-19535High
A CWE-352 Cross-Site Request Forgery vulnerability was identified in the LuCI administrative web interface of Advantech EKI-1242IEIMS firmware V1.06.01. A remote unauthenticated attacker can perform unauthorized state-changing requests on behalf of a logged-in administrator, enabling unauthorized access to privileged management functions.
Original NVD description (English source)
Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS commands as root.