CoreCVE
Back

HIGH

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary Lua code on the device via a crafted imported file

Published Sep 16, 2026

Description

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary Lua code on the device via a crafted imported file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Nozomi
Published Sep 16, 2026
Updated Sep 17, 2026
Reserved Aug 11, 2026
Link CVE-2026-73170
CISA Vulnrichment
Updated Sep 17, 2026
NVD
Status Awaiting Analysis
Modified Sep 17, 2026
Link CVE-2026-73170
Red Hat
Severity n/a
Public date n/a
Links CVE-2026-73170
ENISA EUVD
Assigner Nozomi
Published Sep 16, 2026
Updated Sep 17, 2026
Exploited since n/a
Link EUVD-2026-80730
EUVD-2026-80730