Advantech EKI-1242EIMS CVE-2026-73175

Requires the OPC UA gateway component to be enabled and reachable, and the OPC UA server must permit anonymous sessions (the description explicitly states the attacker opens 'multiple anonymous sessions'). The attacker must be on an adjacent network segment (AV:A) - Layer 2 or logically adjacent to the device - not routed remotely across the internet. No authentication, credentials, or user interaction are needed. Limiting factors: adjacency requirement (attacker needs an existing network foothold), and impact is confined to availability of OPC UA service - no data is read or modified, and other device functions are unaffected. Deployments that disable anonymous OPC UA access or segment the OT network tightly reduce exposure.

This is a genuine but bounded availability risk. The CVSS 4.0 vector (AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H, score 7.1) is well-calibrated and internally consistent with the description: adjacency (AV:A) means the attacker must be on the same L2/adjacent network segment rather than routing from the internet, complexity is low, no privileges or user interaction are needed, and impact is purely availability (VA:H) with zero confidentiality or integrity effect - appropriate for a session-pool exhaustion DoS. There is NO conflict between the vector and the description. Real-world urgency is tempered by the absence of exploitation signals: no CISA KEV listing, no public POC, and no EPSS score is provided in the input. The adjacency requirement is a meaningful limiter - an attacker needs a foothold on the OT/local network, which is the norm for ICS threat models but excludes opportunistic internet-wide scanning. Net: a real, easy-to-trigger availability issue against a niche OT device that matters most where OPC UA continuity is operationally critical, but not a mass-exploitation priority. Note the input omits EPSS/KEV/POC entirely - treat exploitation likelihood as unquantified rather than confirmed-low.

An attacker with a foothold on the same industrial/adjacent network segment as an EKI-1242EIMS gateway repeatedly opens anonymous OPC UA sessions until the server's session pool is fully consumed. Once exhausted, all legitimate OPC UA clients (SCADA/HMI, historians, PLC integrations) are refused new sessions, causing a complete denial of service to the gateway's OPC UA function. No authentication, credentials, or user interaction are required; no public exploit code has been identified at time of analysis.