AAdvantech

Products

Exploited and recent CVEs

• CVE-2026-43858 High 8.6 A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution. 0.7%
• CVE-2026-43857 High 8.6 A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service. 0.7%
• CVE-2026-43856 High 8.6 A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes. 0.7%
• CVE-2026-43855 High 7.5 A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution. 0.5%
• CVE-2026-43854 Medium 6.3 A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices. <0.1%
• CVE-2026-43853 High 8.2 A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash. 0.4%
• CVE-2026-43852 High 8.2 A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system. 0.4%
• CVE-2026-43851 High 8.2 A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system. 0.4%
• CVE-2026-43850 High 8.6 A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system. 1.6%
• CVE-2026-43849 Medium 6.9 A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data. 0.4%
• CVE-2026-43848 Medium 6.9 A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service. 0.3%
• CVE-2026-43847 High 8.2 A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled. 0.3%
• CVE-2026-43846 High 8.6 A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution. 0.5%
• CVE-2026-43845 Critical 9.2 A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism. 0.5%
• CVE-2026-43844 Critical 9.3 A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism. 0.5%
• CVE-2026-43843 Medium 6.9 An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service. 0.3%
• CVE-2026-43842 Medium 6.9 A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0. 0.3%
• CVE-2026-43841 Medium 6.9 A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function. 0.3%
• CVE-2026-43840 Medium 6.9 A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function. 0.3%
• CVE-2026-43839 High 8.7 A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service. 0.3%
• CVE-2026-43838 Critical 9.2 A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution. 0.4%
• CVE-2026-43837 High 7.5 A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution. 0.4%
• CVE-2026-43836 Critical 9.3 A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges. 0.9%
• CVE-2026-43835 High 8.6 A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently. 0.2%
• CVE-2026-43834 High 7.5 A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution. 0.4%
• CVE-2026-73177 High 8.6 Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01. Th 0.1%
• CVE-2026-73177 High 8.6 Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01. Th 0.1%
• CVE-2026-73176 High 8.6 Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242 1.2%
• CVE-2026-73176 High 8.6 Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242 1.2%
• CVE-2026-73175 High 7.1 Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows an adjacen 0.3%