Authenticated Command Injection
CVE-2023-2573

8.8HIGH

Key Information:

Vendor: Advantech
Status: Eki-1524; Eki-1522; Eki-1521
Vendor: CVE Published:; 8 May 2023

What is CVE-2023-2573?

The command injection vulnerability in Advantech EKI-1524, EKI-1522, and EKI-1521 devices allows authenticated users to exploit the NTP server input field. By sending a specially crafted POST request, attackers can potentially execute arbitrary commands on the affected devices, risking the integrity and confidentiality of the network. Users should update to the latest firmware versions to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch