CyberRota Analysis
AI-GeneratedThe edgserver management protocol in Advantech EKI-1242EIMS firmware version V1.06.01 is vulnerable due to missing authentication, allowing remote unauthenticated attackers to execute critical device-management functions such as network reconfiguration and firmware upgrades via crafted requests to TCP port 5058. This high-severity vulnerability poses significant risks to device integrity and network security. Organizations using this device should prioritize immediate remediation to prevent potential exploitation.
Original NVD Description
Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to invoke critical device-management functions, including network reconfiguration, reboot, reset, and firmware upgrade, by sending crafted requests to TCP port 5058.