PT-2023-7183 · Advantech · Eki-1524+2

S. Dietz + 3 · Published 2023-05-08 · Updated 2023-05-12 · CVE-2023-2573

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21

Description The issue is related to a command injection vulnerability in the NTP server input field. This vulnerability can be triggered by authenticated users via a crafted POST request, potentially allowing a remote attacker to execute arbitrary code.

Recommendations For Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21, consider disabling access to the NTP server input field until a patch is available. Restrict access to the vulnerable devices to minimize the risk of exploitation. Avoid using the NTP server input field in the affected devices until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2023-08210

CVE-2023-2573

Affected Products

Eki-1521

Eki-1522

Eki-1524

References · 11

• 🔥 https://cyberdanube.com/en/multiple-vulnerabilities-in-advantech-eki-15xx-series · Exploit
• 🔥 http://seclists.org/fulldisclosure/2023/May/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-2573 · Security Note
• https://advantech.com/en/support/details/firmware?id=1-1J9BECT · Patch
• https://advantech.com/en/support/details/firmware?id=1-1J9BED3 · Patch
• https://osv.dev/vulnerability/CVE-2023-2573 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08210 · Security Note
• https://advantech.com/en/support/details/firmware?id=1-1J9BEBL · Patch
• https://t.me/cvenotify/50318 · Telegram Post
• http://packetstormsecurity.com/files/172307/Advantech-EKI-15XX-Series-Command-Injection-Buffer-Overflow.html · Note
• https://t.me/cibsecurity/63422 · Telegram Post