[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2023-2575Date: (C)2023-05-09   (M)2023-11-10


Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a��Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated��users via a crafted POST request.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 8.8CVSS Score :
Exploit Score: 2.8Exploit Score:
Impact Score: 5.9Impact Score:
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: NETWORKAccess Vector:
Attack Complexity: LOWAccess Complexity:
Privileges Required: LOWAuthentication:
User Interaction: NONEConfidentiality:
Scope: UNCHANGEDIntegrity:
Confidentiality: HIGHAvailability:
Integrity: HIGH 
Availability: HIGH 
  
Reference:
http://packetstormsecurity.com/files/172307/Advantech-EKI-15XX-Series-Command-Injection-Buffer-Overflow.html
http://seclists.org/fulldisclosure/2023/May/4
https://cyberdanube.com/en/multiple-vulnerabilities-in-advantech-eki-15xx-series/
https://www.advantech.com/en/support/details/firmware?id=1-1J9BEBL
https://www.advantech.com/en/support/details/firmware?id=1-1J9BECT
https://www.advantech.com/en/support/details/firmware?id=1-1J9BED3

CWE    1
CWE-787

© SecPod Technologies