High severityNVD Advisory· Published Sep 16, 2026· Updated Sep 17, 2026

CVE-2026-73177

Description

Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01. The device accepts firmware images through the authenticated web management interface without performing any cryptographic signature or certificate verification. An authenticated administrator-level attacker can install arbitrary modified firmware on the device, enabling full persistent compromise of the platform.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Advantech/EKI-1242EIMSllm-fuzzy
Range: =V1.06.01

Patches

Vulnerability mechanics

References

advcloudfiles.advantech.com/cms/5dafee28-ad53-4d07-a328-7896fcc24b6e/Security%20Advisory%20PDF%20File/SECURITY-ADVISORY----EKI-1242IEIMS-updated-20260904.pdfnvd
www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-73177nvd

News mentions

Advantech EKI Series: 15 Vulnerabilities Including Command Injection Disclosed Together
Vypr Intelligence · Sep 16, 2026

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000