CVE-2024-50358:

7.2 CVSS

Description

A CWE-15 "External Control of System or Configuration Setting" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The vulnerability can be exploited by authenticated users by restoring a tampered configuration backup.

Classification

CVE ID: CVE-2024-50358

CVSS Base Severity: HIGH

CVSS Base Score: 7.2

Affected Products

Vendor: Advantech

Product: EKI-6333AC-2G

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 11.44% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-50358

Timeline