Advantech EKI-1242EIMS edgserver Management Protocol Transmits Device Identity and Network Metadata in Cleartext, Recoverable by a Network-Adjacent Passive Observer

Last refreshed2026-09-29

Status: NEW | Advisory ID: CVE-2026-73174

Key Details

CVE	CVE-2026-73174
CVSS Score / Version	8.7 (High) / CVSS v4.0
Updated	2026-09-23
Classified as	CWE-319 (Cleartext Transmission of Sensitive Information)

What to Know

Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a network-adjacent passive observer to intercept management traffic and recover sensitive device identity and network metadata in cleartext.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-73174
CVE	https://www.cve.org/CVERecord?id=CVE-2026-73174

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-73174

CVE

https://www.cve.org/CVERecord?id=CVE-2026-73174

Advantech EKI-1242EIMS edgserver Management Protocol Transmits Device Identity and Network Metadata in Cleartext, Recoverable by a Network-Adjacent Passive Observer

Key Details

What to Know

References

About