CVE-2023-2575: Authenticated Buffer Overflow
Published May 8, 2023
·Updated
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated users via a crafted POST request.
Affected Software
6 affected components
Advantech Eki-1521 Firmware<=1.21
Advantech EKI-1521
Advantech Eki-1522 Firmware<=1.21
Advantech EKI-1522
Advantech Eki-1524 Firmware<=1.21
Advantech EKI-1524
Remediation
Information
Install firmware 1.24 to fix the issue.
Event History
May 8, 2023
CVE Published
via MITRE·12:11 PM
Data Sourced
via MITRE·12:11 PM
RemedyDescriptionSeverityWeakness
Data Sourced
01:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-2575?
The severity of CVE-2023-2575 is high, with a severity value of 8.8.
2
Which Advantech devices are affected by CVE-2023-2575?
Advantech EKI-1524, EKI-1522, and EKI-1521 devices through firmware version 1.21 are affected by CVE-2023-2575.
3
How can CVE-2023-2575 be triggered?
CVE-2023-2575 can be triggered by authenticated users via a crafted POST request.
4
Are Advantech EKI-1522 and EKI-1524 devices vulnerable to CVE-2023-2575?
No, Advantech EKI-1522 and EKI-1524 devices are not vulnerable to CVE-2023-2575.
5
Where can I find more information about CVE-2023-2575?
You can find more information about CVE-2023-2575 on the Advantech support website.