Improper Neutralization of Special Elements in OS Commands Affects Advantech Devices

CVE-2024-50363

Summary

A vulnerability has been identified in select Advantech networking devices, linked to improper sanitization of parameters within the 'mp_apply' API. This flaw may allow attackers to inject malicious commands at the OS level, enabling unauthorized access or control over the affected systems. Devices EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO are specifically impacted by this issue. Users are advised to review their configurations and implement suggested mitigations to safeguard their network infrastructure.

References