Skip to content
OpenAdvisories
Medium ICSA-23-269-04 2 CVEs

Advantech EKI-1524-CE series

Published Sep 26, 2023 · Updated Sep 26, 2023

Vendor: Advantech Product: EKI-1521-CE series Product: EKI-1522-CE series Product: EKI-1524-CE series

Summary

Successful exploitation of these vulnerabilities could allow an attacker to execute code in the context of the session.

Vulnerabilities 2

  • Critical 9.0
    CVE-2023-4202

    Stored Cross-Site Scripting

    Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the device name field of the web-interface.

    Advantech EKI-1522 EKI-1524 EKI-1521
  • Critical 9.0
    CVE-2023-4203

    Stored Cross-Site Scripting

    Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the ping tool of the web-interface.

    Advantech EKI-1521 EKI-1522 EKI-1524

Revision history

  1. #1

    Initial Publication

References