Which versions of Advantech EKI-1242IEIMS are affected by CVE-2026-73163?

A high-severity OS command injection flaw affects Advantech EKI-1242IEIMS industrial gateways running firmware V1.06.01, allowing an attacker who already holds a high-privilege management session to…

How to fix or mitigate CVE-2026-73163?

Within 24 hours, inventory all Advantech EKI-1242IEIMS gateways and confirm which are running firmware V1.06.01, then restrict management-interface exposure by removing internet-facing access and limiting reachability to a hardened administrative VLAN or jump host; rotate administrative credentials and enforce unique, strong passwords with multifactor authentication where the interface supports it, and audit management logs for unexpected command activity. Within 7 days, contact Advantech support to obtain a fix timeline or interim firmware guidance, apply any available vendor mitigation or configuration hardening, and enable enhanced logging and alerting on the affected devices; verify that no unnecessary high-privilege accounts exist and reduce administrative sessions to the minimum required. Within 30 days, deploy the vendor patch as soon as it is released, validate that firmware has been updated across all units, and incorporate these gateways into routine firmware-vulnerability tracking and network segmentation reviews.

Advantech EKI-1242IEIMS CVE-2026-73163

Q: What is the CVSS score of CVE-2026-73163?

CVE-2026-73163 has a CVSS 4.0 base score of 8.6 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X.

EUVD-2026-80736 HIGH

OS Command Injection (CWE-78)

2026-09-16 Nozomi

Command Injection Advantech Eki 1242Ieims Eki 1242Eims

8.6

CVSS 4.0 · Vendor: Nozomi

Severity by source

Vendor (Nozomi) PRIMARY

8.6 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.2 HIGH

Network-reachable web interface (AV:N/AC:L) but requires high-privilege authentication (PR:H); command injection runs as root giving full C/I/A impact with no scope change.

3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (Nozomi).

CVSS VectorVendor: Nozomi

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Sep 16, 2026 - 13:18 vuln.today

CVE Published

Sep 16, 2026 - 12:36 cve.org

HIGH 8.6

DescriptionCVE.org

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.

AnalysisAI

OS command injection in the web management interface of Advantech EKI-1242IEIMS industrial gateways (firmware V1.06.01) lets a remote authenticated attacker with high privileges execute arbitrary OS commands as root. Exploitation requires a valid high-privilege session (CVSS 4.0 PR:H) and network reachability to the management interface, but then yields full device compromise (VC:H/VI:H/VA:H). …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires an authenticated session at high privilege (PR:H) on the web management interface of an Advantech EKI-1242IEIMS running firmware V1.06.01; the attacker then supplies crafted request parameters that are improperly neutralized and executed as OS commands running as root. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 base score of 8.6 (High) is driven by full compromise potential (VC:H/VI:H/VA:H) via network vector with low complexity, but is meaningfully gated by PR:H - the attacker must already hold high-privilege authenticated access to the web management interface before injecting OS commands that run as root. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Apply the fixed firmware version as detailed in the Advantech security advisory (https://advcloudfiles.advantech.com/cms/5dafee28-ad53-4d07-a328-7896fcc24b6e/Security%20Advisory%20PDF%20File/SECURITY-ADVISORY----EKI-1242IEIMS-updated-20260904.pdf); the exact patched release is not specified in available data, so consult the advisory for the specific version. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, inventory all Advantech EKI-1242IEIMS gateways and confirm which are running firmware V1.06.01, then restrict management-interface exposure by removing internet-facing access and limiting reachability to a hardened administrative VLAN or jump host; rotate administrative credentials and enforce unique, strong passwords with multifactor authentication where the interface supports it, and audit management logs for unexpected command activity. …

Threat intelligence, references, and detailed analysis are available after sign-in.