OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-73175

HIGH · CVSS 7.1 EPSS 0.26%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The OPC UA gateway component of Advantech EKI-1242EIMS firmware version V1.06.01 is vulnerable to an uncontrolled resource consumption issue, enabling an adjacent unauthenticated attacker to deplete the server's session pool. This can lead to a complete denial of service for all legitimate OPC UA clients, disrupting operations. Organizations using this specific firmware should prioritize patching to mitigate the risk of service outages.

CVE
CVE-2026-73175
Severity
HIGH
CVSS
7.1
EPSS
0.26%

Original NVD Description

Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows an adjacent unauthenticated attacker to exhaust the server session pool and cause a complete denial of service to all legitimate OPC UA clients by opening multiple anonymous sessions.