← Database

CVE-2023-2573

HIGH CVSS: 8.8 Published: 2023-05-08 Modified: 2026-06-17

Description

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the NTP server input field, which can be triggered by authenticated users via a crafted POST request.

Affected Platforms

Advantech Eki-1524Advantech Eki-1521Advantech Eki-1522Advantech Eki-1524 FirmwareAdvantech Eki-1522 FirmwareAdvantech Eki-1521 Firmware

Weakness Type

CWE-78, CWE-77

References