CyberRota Analysis
AI-GeneratedThe edgserver management protocol in Advantech EKI-1242EIMS firmware version V1.06.01 is vulnerable to cleartext transmission of sensitive information, allowing network-adjacent attackers to intercept and recover sensitive device identities and network metadata. This vulnerability poses a significant risk to organizations relying on this device for network management, as it can lead to unauthorized access and exploitation of sensitive information. Organizations using this firmware should prioritize patching or mitigating this vulnerability to safeguard their network integrity.
Original NVD Description
Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a network-adjacent passive observer to intercept management traffic and recover sensitive device identity and network metadata in cleartext.