High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-05-08	CVE-2023-2573	Command Injection vulnerability in Advantech products Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the NTP server input field, which can be triggered by authenticated users via a crafted POST request. network low complexity advantech CWE-77	8.8
2023-05-08	CVE-2023-2574	Command Injection vulnerability in Advantech products Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the device name input field, which can be triggered by authenticated users via a crafted POST request. network low complexity advantech CWE-77	8.8
2023-05-08	CVE-2023-2575	Out-of-bounds Write vulnerability in Advantech products Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated users via a crafted POST request. network low complexity advantech CWE-787	8.8