CVE-2026-73169: XSS
Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Modbus transaction management interface of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to store malicious script content that executes in the browser of any administrator who later opens an affected management page.
Affected Software
Event History
Frequently Asked Questions
Who needs to interact with the vulnerable interface for exploitation to succeed?
A remote attacker must be authenticated and able to submit malicious script content through the Modbus transaction management interface. The stored script executes when an administrator later opens an affected management page.
Which firmware version is identified as affected?
The vulnerability is identified in Advantech EKI-1242EIMS firmware version V1.06.01.
How can an organization determine whether it may be affected?
Identify Advantech EKI-1242EIMS devices running firmware V1.06.01 and review use of the Modbus transaction management interface. Devices where authenticated users can store transaction-related content may expose administrators to stored script execution when they view affected pages.