Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2024-50376

A CWE-79 "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Nozomi

Description

A CWE-79 "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The vulnerability can be exploited remotely leveraging a rogue Wi-Fi access point with a malicious SSID.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Advantech EKI-6333AC-2G

Default version status: unaffected

  • 0 to ≤ <= 1.6.3affected

Advantech EKI-6333AC-2GD

Default version status: unaffected

  • 0 to ≤ <= 1.6.3affected

Advantech EKI-6333AC-1GPO

Default version status: unaffected

  • 0 to ≤ <= 1.2.1affected

References