OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-73174

HIGH · CVSS 8.7 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The edgserver management protocol in Advantech EKI-1242EIMS firmware version V1.06.01 is vulnerable to cleartext transmission of sensitive information, allowing network-adjacent attackers to intercept and recover sensitive device identities and network metadata. This vulnerability poses a significant risk to organizations relying on this device for network management, as it can lead to unauthorized access and exploitation of sensitive information. Organizations using this firmware should prioritize patching or mitigating this vulnerability to safeguard their network integrity.

CVE
CVE-2026-73174
Severity
HIGH
CVSS
8.7
EPSS
0.16%

Original NVD Description

Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a network-adjacent passive observer to intercept management traffic and recover sensitive device identity and network metadata in cleartext.