PT-2026-66669 · Advantech · Ecu-1251D

CVE-2026-6889 · Published 2026-07-31 · Updated 2026-07-31

Mitre

CVSS v4.0

6.9

Medium

Base vector

AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

A denial of service vulnerability in the Advantech ECU-1251D allows a network-adjacent attacker to send a DNP3 signal to the Digital Output address of the device, causing the DNP3Daemon to invoke a non-existent system file and enter an indefinite restart loop. While the device remains partially accessible via its web panel or direct signals, an operator using SCADA TelWin is unable to reconnect until the device is manually restarted.

Fix

Related Identifiers

CVE-2026-6889

Affected Products

Ecu-1251D

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-6889 · Security Note
• https://csa.gov.sg/alerts-and-advisories/alerts/al-2026-095 · Note