prodsec@nozominetworks.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS prodsec@nozominetworks.com
03
assessed vulnerabilities (303)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-73177US | —OT elevated | — | ||
Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware… | ||||
| CVE-2026-73176US | — | — | ||
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface o… | ||||
| CVE-2026-73175US | — | — | ||
Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-1242EIMS in firmware version V1.06.01 th… | ||||
| CVE-2026-73174US | —OT elevated | — | ||
Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware… | ||||
| CVE-2026-73173US | —OT elevated | — | ||
Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware ver… | ||||
| CVE-2026-73172US | — | — | ||
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the edgserver management servi… | ||||
| CVE-2026-73171US | — | — | ||
Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmware version V1.06.01… | ||||
| CVE-2026-73170US | — | — | ||
Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in fir… | ||||
| CVE-2026-73169US | — | — | ||
Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Modbus transaction management in… | ||||
| CVE-2026-73167US | — | — | ||
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface o… | ||||
| CVE-2026-73166US | — | — | ||
Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firm… | ||||
| CVE-2026-73165US | — | — | ||
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface o… | ||||
| CVE-2026-73164US | — | — | ||
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface o… | ||||
| CVE-2026-73163US | — | — | ||
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface o… | ||||
| CVE-2026-19535US | — | — | ||
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advantech EKI-1242IEIMS in firmware version V… | ||||
| CVE-2026-33920US | — | — | ||
A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token. An attacker with a v… | ||||
| CVE-2026-33391US | —OT elevated | — | ||
An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limite… | ||||
| CVE-2026-33389US | — | — | ||
An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without valid… | ||||
| CVE-2026-33388US | —OT elevated | — | ||
An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited… | ||||
| CVE-2026-33387US | — | — | ||
A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileg… | ||||