<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: eki-6333ac-2g firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-50377: A CWE-798 &quot;Use of Hard-coded Credentials&quot; was discovered affecting the following devices manufactured by Advan</title><link>https://patchthecve.com/cve/CVE-2024-50377.html</link><guid>https://patchthecve.com/cve/CVE-2024-50377.html</guid><pubDate>Wed, 17 Jun 2026 08:04:20 +0000</pubDate><description>MEDIUM 6.5: A CWE-798 &quot;Use of Hard-coded Credentials&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The vulnerability is associated to the backup configuration functionality that by default encrypts</description></item><item><title>CVE-2024-50376: A CWE-79 &quot;Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;)&quot; was discovered</title><link>https://patchthecve.com/cve/CVE-2024-50376.html</link><guid>https://patchthecve.com/cve/CVE-2024-50376.html</guid><pubDate>Wed, 17 Jun 2026 08:04:20 +0000</pubDate><description>HIGH 7.3: A CWE-79 &quot;Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The vulnerability can be exploited remotely </description></item><item><title>CVE-2024-50375: A CWE-306 &quot;Missing Authentication for Critical Function&quot; was discovered affecting the following devices manufa</title><link>https://patchthecve.com/cve/CVE-2024-50375.html</link><guid>https://patchthecve.com/cve/CVE-2024-50375.html</guid><pubDate>Wed, 17 Jun 2026 08:04:20 +0000</pubDate><description>CRITICAL 9.8: A CWE-306 &quot;Missing Authentication for Critical Function&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The vulnerability can be exploited by remote unauthenticated users capable of inter</description></item><item><title>CVE-2024-50374: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was disc</title><link>https://patchthecve.com/cve/CVE-2024-50374.html</link><guid>https://patchthecve.com/cve/CVE-2024-50374.html</guid><pubDate>Wed, 17 Jun 2026 08:04:19 +0000</pubDate><description>CRITICAL 9.8: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The vulnerability can be exploited by </description></item><item><title>CVE-2024-50373: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was disc</title><link>https://patchthecve.com/cve/CVE-2024-50373.html</link><guid>https://patchthecve.com/cve/CVE-2024-50373.html</guid><pubDate>Wed, 17 Jun 2026 08:04:19 +0000</pubDate><description>CRITICAL 9.8: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The vulnerability can be exploited by </description></item><item><title>CVE-2024-50372: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was disc</title><link>https://patchthecve.com/cve/CVE-2024-50372.html</link><guid>https://patchthecve.com/cve/CVE-2024-50372.html</guid><pubDate>Wed, 17 Jun 2026 08:04:19 +0000</pubDate><description>CRITICAL 9.8: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The vulnerability can be exploited by </description></item><item><title>CVE-2024-50371: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was disc</title><link>https://patchthecve.com/cve/CVE-2024-50371.html</link><guid>https://patchthecve.com/cve/CVE-2024-50371.html</guid><pubDate>Wed, 17 Jun 2026 08:04:19 +0000</pubDate><description>CRITICAL 9.8: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The vulnerability can be exploited by </description></item><item><title>CVE-2024-50370: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was disc</title><link>https://patchthecve.com/cve/CVE-2024-50370.html</link><guid>https://patchthecve.com/cve/CVE-2024-50370.html</guid><pubDate>Wed, 17 Jun 2026 08:04:19 +0000</pubDate><description>CRITICAL 9.8: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The vulnerability can be exploited by </description></item><item><title>CVE-2024-50369: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was disc</title><link>https://patchthecve.com/cve/CVE-2024-50369.html</link><guid>https://patchthecve.com/cve/CVE-2024-50369.html</guid><pubDate>Wed, 17 Jun 2026 08:04:19 +0000</pubDate><description>HIGH 7.2: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The source of the vulnerability relies</description></item><item><title>CVE-2024-50368: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was disc</title><link>https://patchthecve.com/cve/CVE-2024-50368.html</link><guid>https://patchthecve.com/cve/CVE-2024-50368.html</guid><pubDate>Wed, 17 Jun 2026 08:04:19 +0000</pubDate><description>HIGH 7.2: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The source of the vulnerability relies</description></item><item><title>CVE-2024-50367: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was disc</title><link>https://patchthecve.com/cve/CVE-2024-50367.html</link><guid>https://patchthecve.com/cve/CVE-2024-50367.html</guid><pubDate>Wed, 17 Jun 2026 08:04:19 +0000</pubDate><description>HIGH 7.2: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The source of the vulnerability relies</description></item><item><title>CVE-2024-50366: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was disc</title><link>https://patchthecve.com/cve/CVE-2024-50366.html</link><guid>https://patchthecve.com/cve/CVE-2024-50366.html</guid><pubDate>Wed, 17 Jun 2026 08:04:19 +0000</pubDate><description>HIGH 7.2: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The source of the vulnerability relies</description></item><item><title>CVE-2024-50365: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was disc</title><link>https://patchthecve.com/cve/CVE-2024-50365.html</link><guid>https://patchthecve.com/cve/CVE-2024-50365.html</guid><pubDate>Wed, 17 Jun 2026 08:04:18 +0000</pubDate><description>HIGH 7.2: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The source of the vulnerability relies</description></item><item><title>CVE-2024-50364: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was disc</title><link>https://patchthecve.com/cve/CVE-2024-50364.html</link><guid>https://patchthecve.com/cve/CVE-2024-50364.html</guid><pubDate>Wed, 17 Jun 2026 08:04:18 +0000</pubDate><description>HIGH 7.2: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The source of the vulnerability relies</description></item><item><title>CVE-2024-50363: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was disc</title><link>https://patchthecve.com/cve/CVE-2024-50363.html</link><guid>https://patchthecve.com/cve/CVE-2024-50363.html</guid><pubDate>Wed, 17 Jun 2026 08:04:18 +0000</pubDate><description>HIGH 7.2: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The source of the vulnerability relies</description></item><item><title>CVE-2024-50362: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was disc</title><link>https://patchthecve.com/cve/CVE-2024-50362.html</link><guid>https://patchthecve.com/cve/CVE-2024-50362.html</guid><pubDate>Wed, 17 Jun 2026 08:04:18 +0000</pubDate><description>HIGH 7.2: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The source of the vulnerability relies</description></item><item><title>CVE-2024-50361: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was disc</title><link>https://patchthecve.com/cve/CVE-2024-50361.html</link><guid>https://patchthecve.com/cve/CVE-2024-50361.html</guid><pubDate>Wed, 17 Jun 2026 08:04:18 +0000</pubDate><description>HIGH 7.2: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The source of the vulnerability relies</description></item><item><title>CVE-2024-50360: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was disc</title><link>https://patchthecve.com/cve/CVE-2024-50360.html</link><guid>https://patchthecve.com/cve/CVE-2024-50360.html</guid><pubDate>Wed, 17 Jun 2026 08:04:18 +0000</pubDate><description>HIGH 7.2: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The source of the vulnerability relies</description></item><item><title>CVE-2024-50359: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was disc</title><link>https://patchthecve.com/cve/CVE-2024-50359.html</link><guid>https://patchthecve.com/cve/CVE-2024-50359.html</guid><pubDate>Wed, 17 Jun 2026 08:04:18 +0000</pubDate><description>HIGH 7.2: A CWE-78 &quot;Improper Neutralization of Special Elements used in an OS Command (&#x27;OS Command Injection&#x27;)&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The source of the vulnerability relies</description></item><item><title>CVE-2024-50358: A CWE-15 &quot;External Control of System or Configuration Setting&quot; was discovered affecting the following devices </title><link>https://patchthecve.com/cve/CVE-2024-50358.html</link><guid>https://patchthecve.com/cve/CVE-2024-50358.html</guid><pubDate>Wed, 17 Jun 2026 08:04:18 +0000</pubDate><description>HIGH 7.2: A CWE-15 &quot;External Control of System or Configuration Setting&quot; was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (&lt;= 1.6.3), EKI-6333AC-2GD (&lt;= v1.6.3) and EKI-6333AC-1GPO (&lt;= v1.2.1). The vulnerability can be exploited by authenticated users by restoring a tamp</description></item></channel></rss>