CVE-2014-8387

Advantech EKI-6340 2.05 - Authenticated OS Command Injection via pinghost Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2014-8387. PoCs published by Core Security.

AI-analyzed exploit summary The exploit demonstrates an OS command injection vulnerability in Advantech EKI-6340 via the 'ping.cgi' file, allowing remote attackers to execute arbitrary commands by injecting them after the 'pinghost' parameter. Authentication is required but can be bypassed using default credentials (user:user).

Description

cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitrary commands via shell metacharacters in the pinghost parameter to ping.cgi.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Core Security · textwebappscgi
https://www.exploit-db.com/exploits/35357

The exploit demonstrates an OS command injection vulnerability in Advantech EKI-6340 via the 'ping.cgi' file, allowing remote attackers to execute arbitrary commands by injecting them after the 'pinghost' parameter. Authentication is required but can be bypassed using default credentials (user:user).

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Advantech EKI-6340 V2.05
Auth required
Prerequisites: Network access to the device · Default or known credentials for 'user' or 'guest' account
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2014/Nov/58
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/534021/100/0/threaded
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/71192

Scores

EPSS 0.2381
EPSS Percentile 97.5%

Details

CWE
CWE-78
Status published
Products (2)
advantech/eki-6340
advantech/eki-6340_firmware 2.05
Published Nov 20, 2014
Tracked Since Feb 18, 2026