Loading story…
The Canadian Centre for Cyber Security issued advisory AV26-937 for vulnerabilities affecting Advantech EKI-1242EIMS and EKI-1242IEIMS industrial-control products running firmware 2.00.01 or earlier. The advisory directs operators and administrators to review Advantech’s security guidance and apply vendor updates when available.
The available advisory information does not identify CVE identifiers, severity scores, technical impacts, or evidence of active exploitation. Organizations using the affected devices should inventory deployed firmware versions, monitor Advantech’s security-advisory channel for remediation details, and prioritize updates under established industrial-control-system change-management procedures.
See affected versions and whether adversaries are exploiting it.
3 events from the most recent confirmed update back to the earliest known activity.
The Canadian Centre for Cyber Security issued advisory AV26-937 concerning vulnerabilities in Advantech industrial-control products and advised users to review Advantech security advisories and apply necessary updates when available.
As of September 4, 2026, vulnerabilities affected Advantech EKI-1242EIMS and EKI-1242IEIMS industrial-control products running firmware version 2.00.01 or earlier.
Advantech published guidance asking researchers, partners, and customers to report potential product vulnerabilities to its security team, including affected product and firmware information, vulnerability details, and reproduction steps.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Advantech disclosed multiple vulnerabilities affecting its **WISE-6610** industrial gateway product line. The issues affect multiple models and software versions, although the available public notices do not specify CVE identifiers, severity scores, technical impacts, or evidence of exploitation. The Canadian Centre for Cyber Security issued advisory `AV26-907` covering the affected gateways and directed operators and administrators to Advantech’s security advisory for product-specific details. Organizations using WISE-6610 devices should identify exposed and deployed units, review Advantech guidance, and apply available updates through established industrial-control-system change-management processes.
Sep 10, 2026
Advantech released security updates for **EKI-series industrial wireless access points** after researchers disclosed **20 vulnerabilities**, including **six critical flaws** tracked as `CVE-2024-50370` through `CVE-2024-50375`. The most severe issues affect over-the-air functionality and can let a **remote, unauthenticated attacker** bypass authentication, execute arbitrary code as **root**, and take full control of exposed devices. The affected products are **EKI-6333AC-2G** and **EKI-6333AC-2GD** running firmware earlier than **v1.6.5**, and **EKI-6333AC-1GPO** running firmware earlier than **v1.2.2**. Additional high-severity weaknesses could enable **cross-site scripting**, **system command injection**, **denial of service**, and unauthorized access to sensitive data. Defenders are advised to **immediately upgrade firmware** to the vendor-fixed versions and review internet-exposed or operational technology deployments using these access points.
Jul 24, 2026
CISA published four new advisories detailing critical vulnerabilities affecting a range of industrial control system (ICS) products from Advantech, Ubia, and ABB. The vulnerabilities include improper input neutralization, path traversal, use of hard-coded credentials, insufficiently protected credentials, and improper validation of input types. Exploitation of these flaws could allow attackers to achieve remote code execution, denial-of-service, unauthorized access to camera feeds, or full remote control of affected devices. The impacted products are Advantech DeviceOn/iEdge (v2.0.2 and prior), Ubia Ubox (v1.1.124), and multiple ABB FLXeon controller models (various versions up to 9.3.5). CISA recommends immediate review of the technical details and implementation of mitigations provided in the advisories. Notably, the Ubia Ubox vulnerability remains uncoordinated with the vendor, increasing risk for users. Organizations using these ICS products should prioritize patching, restrict network exposure, and follow CISA's defensive measures to minimize exploitation risk. The advisories underscore the ongoing threat to critical infrastructure posed by vulnerabilities in widely deployed ICS equipment.
Jun 29, 2026