{"Advantech Devices Vulnerable to Missing Authentication Flaw","Advantech EKI-6333AC Devices at Risk of Exploitation"}

CVE-2024-50375

Summary

A significant security vulnerability exists within Advantech's EKI series access points that allows unauthorized remote users to exploit the default 'edgserver' service. This flaw manifests as a missing authentication for critical functions, affecting the EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO models with specific versions. The impact of this vulnerability can lead to unauthorized access and potential manipulation of network services without proper authentication, posing a risk to device integrity and security.

References