# CVE-2026-73174: Advantech EKI-1242 cleartext transmission of sensitive information

Source: https://junglewise.ai/threats/cve-2026-73174-advantech-eki-1242-cleartext-transmission-of-sensitive  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-16. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-73174 · Severity: info · CVSS 8.7 · Published 2026-09-16

Advantech EKI-1242 devices are industrial edge computing appliances used to manage and monitor network infrastructure in operational technology environments. A vulnerability in the management protocol allows a network-adjacent attacker to intercept and read sensitive device identity and network metadata in cleartext, potentially compromising network security and enabling further attacks on the infrastructure.

Technologies: [Advantech EKI-1242EIMS](https://junglewise.ai/threats/technologies/eki-1242eims), [Advantech EKI-1242IEIMS](https://junglewise.ai/threats/technologies/eki-1242ieims). Vendors: [Advantech](https://junglewise.ai/threats/vendors/advantech).

## Quick answers

**Is CVE-2026-73174 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-73174 being exploited in the wild.

**How severe is CVE-2026-73174?** Informational severity, with a CVSS score of 8.7, published 16 September 2026.

**Which products and versions are affected?** Advantech EKI-1242EIMS V1.06.01; Advantech EKI-1242IEIMS V1.06.01.

**Is there a fix for CVE-2026-73174?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-73174 attacked?** It is attacked from the adjacent network or over the network, in a network appliance.

**Am I affected by CVE-2026-73174?** Check whether you run Advantech EKI-1242EIMS or Advantech EKI-1242IEIMS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This CWE-319 vulnerability exists in the edgserver management protocol of Advantech EKI-1242IEIMS and EKI-1242EIMS devices running firmware version V1.06.01. The management protocol transmits sensitive device identity and network metadata without encryption, allowing a network-adjacent passive observer to intercept and recover this information. No authentication or user interaction is required; an attacker only needs network proximity to the device. The vulnerability has been addressed in firmware version 2.00.01.

## Affected products

- Advantech EKI-1242IEIMS V1.06.01
- Advantech EKI-1242EIMS V1.06.01

## Timeline

- 2026-09-16: disclosed

## References

- [https://advcloudfiles.advantech.com/cms/5dafee28-ad53-4d07-a328-7896fcc24b6e/Security%20Advisory%20PDF%20File/SECURITY-ADVISORY----EKI-1242IEIMS-updated-20260904.pdf](https://advcloudfiles.advantech.com/cms/5dafee28-ad53-4d07-a328-7896fcc24b6e/Security%20Advisory%20PDF%20File/SECURITY-ADVISORY----EKI-1242IEIMS-updated-20260904.pdf)
- [https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-73174](https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-73174)

## Related threats

- [Advantech EKI-1242EIMS firmware signature verification bypass](https://junglewise.ai/threats/cve-2026-73177-advantech-eki-1242eims-firmware-signature-verification-bypass)
- [Advantech EKI-1242IEIMS OS command injection in web management interface](https://junglewise.ai/threats/cve-2026-73176-advantech-eki-1242ieims-os-command-injection-in-web-management)
- [Advantech EKI-1242 denial of service in OPC UA gateway](https://junglewise.ai/threats/cve-2026-73175-advantech-eki-1242-denial-of-service-in-opc-ua-gateway)
- [Advantech EKI-1242IEIMS missing authentication in management protocol](https://junglewise.ai/threats/cve-2026-73173-advantech-eki-1242ieims-missing-authentication-in-management)
- [Advantech EKI-1242EIMS OS command injection in edgserver management](https://junglewise.ai/threats/cve-2026-73172-advantech-eki-1242eims-os-command-injection-in-edgserver)