CVE-2023-4203
CRITICALAdvantech EKI-1524, EKI-1522, EKI-1521 <1.21 - XSS
Title source: llmDescription
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the ping tool of the web-interface.
References (3)
Core 3
Core References
Exploit, Third Party Advisory
https://cyberdanube.com/en/en-st-polten-uas-multiple-vulnerabilities-in-advantech-eki-15xx-series/
Mailing List
http://seclists.org/fulldisclosure/2023/Aug/13
Exploit, Third Party Advisory
http://packetstormsecurity.com/files/174153/Advantech-EKI-1524-CE-EKI-1522-EKI-1521-Cross-Site-Scripting.html
Scores
CVSS v3
9.0
EPSS
0.0085
EPSS Percentile
75.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
CWE
CWE-79
Status
published
Products (3)
advantech/eki-1521_firmware
< 1.24
advantech/eki-1522_firmware
< 1.24
advantech/eki-1524_firmware
< 1.24
Published
Aug 08, 2023
Tracked Since
Feb 18, 2026