https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 21:43:27 +0000 https://cve.radiocsirt.org/vuln/cve-2024-50368 <p><strong>Affected:</strong> Advantech EKI-6333AC-2G, Advantech EKI-6333AC-2GD, Advantech EKI-6333AC-1GPO, advantech eki-6333ac-2g_firmware, advantech eki-6333ac-2gd_firmware, advantech eki-6333ac-1gpo_firmware</p> <p>A CWE-78 &#34;Improper Neutralization of Special Elements used in an OS Command (&#39;OS Command Injection&#39;)&#34; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The source of the vulnerability relies on multiple parameters belonging to the &#34;basic_htm&#34; API which are not properly sanitized before being concatenated to OS level commands.</p> <p><strong>Affected:</strong> Advantech EKI-6333AC-2G, Advantech EKI-6333AC-2GD, Advantech EKI-6333AC-1GPO, advantech eki-6333ac-2g_firmware, advantech eki-6333ac-2gd_firmware, advantech eki-6333ac-1gpo_firmware</p> <p>A CWE-78 &#34;Improper Neutralization of Special Elements used in an OS Command (&#39;OS Command Injection&#39;)&#34; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The source of the vulnerability relies on multiple parameters belonging to the &#34;basic_htm&#34; API which are not properly sanitized before being concatenated to OS level commands.</p> https://cve.radiocsirt.org/vuln/cve-2024-50368