CyberRota Analysis
AI-GeneratedThe vulnerability affects the web management interface of Advantech EKI-1242IEIMS devices running firmware version V1.06.01, allowing remote authenticated attackers to execute arbitrary OS commands with root privileges through specially crafted request parameters. This could lead to significant security breaches, including unauthorized access and control over the affected systems. Organizations using this firmware should prioritize patching to mitigate the risk of exploitation.
Original NVD Description
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.