CyberRota Analysis
AI-GeneratedThe vulnerability affects the web management interface of Advantech EKI-1242IEIMS devices running firmware version V1.06.01, allowing remote authenticated attackers to execute arbitrary OS commands with root privileges through specially crafted request parameters. This poses a significant risk, as it could lead to unauthorized access and control over the affected devices. Organizations utilizing these devices should prioritize patching or mitigating this vulnerability to safeguard their systems from potential exploitation.
Original NVD Description
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.