PT-2026-66669 · Advantech · Ecu-1251D

CVE-2026-6889 · Publicado 2026-07-31 · Atualizado 2026-07-31

Mitre

CVSS v4.0

6.9

Média

Vetor base

AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

A denial of service vulnerability in the Advantech ECU-1251D allows a network-adjacent attacker to send a DNP3 signal to the Digital Output address of the device, causing the DNP3Daemon to invoke a non-existent system file and enter an indefinite restart loop. While the device remains partially accessible via its web panel or direct signals, an operator using SCADA TelWin is unable to reconnect until the device is manually restarted.

Correção

Identificadores relacionados

CVE-2026-6889

Produtos afetados

Ecu-1251D

Referências · 2

• https://csa.gov.sg/alerts-and-advisories/alerts/al-2026-095 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-6889 · Nota de Segurança