Critical · 9.0 CVE-2023-4202 EUVD-2023-54076GHSA-7cj7-3cq3-8fhp

Stored Cross-Site Scripting

Published Aug 8, 2023 · Updated Feb 13, 2025 · Assigned by CyberDanube

Vendor: Advantech Product: EKI-1521 Product: EKI-1522 Product: EKI-1524

Description

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the device name field of the web-interface.

Affected products

Vendor	Product	Affected	Fixed
Advantech	EKI-1524	≤ 1.21	—
Advantech	EKI-1522	≤ 1.21	—
Advantech	EKI-1521	≤ 1.21	—

Advisories 1

ICSA-23-269-04 Advantech EKI-1524-CE series CISA ICS & IT advisories · Sep 26, 2023

References

https://cyberdanube.com/en/en-st-polten-uas-multiple-vulnerabilities-in-advantech-eki-15xx-series/ third-party-advisory exploit
http://seclists.org/fulldisclosure/2023/Aug/13
http://packetstormsecurity.com/files/174153/Advantech-EKI-1524-CE-EKI-1522-EKI-1521-Cross-Site-Scripting.html