CVE-2024-50358CWE-15

A CWE-15 "External Control of System or Configuration Setting" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<=…

High · published November 26, 2024

CVSS v3.1
7.2
EPSS
1%
Percentile
44.5
In the wild
Unconfirmed
What it is

A CWE-15 "External Control of System or Configuration Setting" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The vulnerability can be exploited by authenticated users by restoring a tampered configuration backup.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00537 · 44.5th percentile
Weakness
CWE-15 · External Control of System or Configuration Setting
Published
2024-11-26T10:51Z
EPSS history
Timeline
  • 26 NOV 10:51Z
    A CWE-15 "External Control of System or Configuration Setting" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<=…
    cvelistv5