Description

A CWE-306 "Missing Authentication for Critical Function" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The vulnerability can be exploited by remote unauthenticated users capable of interacting with the default "edgserver" service enabled on the access point.

INFO

Published Date :

2024-11-26T10:57:03.468Z

Last Modified :

2024-11-26T14:19:25.629Z

Source :

Nozomi
AFFECTED PRODUCTS

The following products are affected by CVE-2024-50375 vulnerability.

Vendors Products
Advantech
  • Eki-6333ac-1gpo
  • Eki-6333ac-1gpo Firmware
  • Eki-6333ac-2g
  • Eki-6333ac-2g Firmware
  • Eki-6333ac-2gd
  • Eki-6333ac-2gd Firmware
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-50375.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact