Advantech EKI-1242EIMS Modbus CSV Import Evaluates Crafted File Content as Lua, Allowing Authenticated Administrators to Execute Arbitrary Code

Last refreshed2026-09-29

Status: NEW | Advisory ID: CVE-2026-73170

Key Details

CVE	CVE-2026-73170
CVSS Score / Version	8.6 (High) / CVSS v4.0
Updated	2026-09-23
Classified as	CWE-94 (Improper Control of Generation of Code ('Code Injection'))

What to Know

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary Lua code on the device via a crafted imported file.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-73170
CVE	https://www.cve.org/CVERecord?id=CVE-2026-73170

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-73170

CVE

https://www.cve.org/CVERecord?id=CVE-2026-73170

Advantech EKI-1242EIMS Modbus CSV Import Evaluates Crafted File Content as Lua, Allowing Authenticated Administrators to Execute Arbitrary Code

Key Details

What to Know

References

About