← CVE Intelligence

CVE-2024-50376

Advantech / EKI-6333AC-2G PUBLISHED

Description (CNA)

A CWE-79 "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The vulnerability can be exploited remotely leveraging a rogue Wi-Fi access point with a malicious SSID.

Affected (CNA)

Vendor / productVersions
Advantech / EKI-6333AC-2Gaffected 0 through <= 1.6.3
Advantech / EKI-6333AC-2GDaffected 0 through <= 1.6.3
Advantech / EKI-6333AC-1GPOaffected 0 through <= 1.2.1

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.