Description
Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Modbus transaction management interface of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to store malicious script content that executes in the browser of any administrator who later opens an affected management page.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Advantech | EKI-1242IEIMS | ≤ 1.06.01 | — |
| Advantech | EKI-1242EIMS | ≤ 1.06.01 | — |