CVE-2024-50362

Summary

CVE-2024-53602 is a newly discovered OS Command Injection vulnerability affecting select Advantech devices: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3), and EKI-6333AC-1GPO (<= v1.2.1). The vulnerability stems from improper neutralization of special elements in the "connection_profile_apply" API, which allows attackers to inject malicious commands at the operating system level. This issue can potentially expose sensitive information, enable unauthorized access, or even lead to full system compromise. Users are strongly encouraged to update their devices to the latest available firmware versions to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.