CVE-2026-73175 | Nozomi Networks Labs

Join us at Spark 2026 - Nozomi Networks' Customer Conference!

Summary

Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component.

Impact

An adjacent unauthenticated attacker may exhaust the server session pool and cause a complete denial of service to all legitimate OPC UA clients by opening multiple anonymous sessions

Issue Date

September 16, 2026

Affects

This issue affects: Advantech EKI-1242IEIMS and EKI-1242EIMS in firmware version V1.06.01.

CVE Name

CVE-2026-73175

CVSS Details

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVSS Score

7.1

Solution

Update to firmware version 2.00.01.

Mitigations

Acknowledgements

Simone Bossi at Nozomi Networks

Nozomi Threat Intelligence

Nozomi Networks Labs curates threat and vulnerability insights that are continuously fed into the Nozomi Networks platform to ensure our sensors can detect existing and emerging threats and vulnerabilities that threaten customers environments.

Learn more

Nozomi Networks Threat Intelligence dashboard showing pie charts of targeted industries, countries, and malware types, with detailed threat actor and vulnerability information below.

Latest Labs Blogs

Discover how easy it is to identify and respond to cyber threats by automating your OT and IoT asset discovery, inventory and management.

Request a Demo Watch Demo

Uncontrolled Resource Consumption

Summary

Impact

Issue Date

Affects

CVE Name

CVSS Details

CVSS Score

Solution

Mitigations

Acknowledgements

Nozomi Threat Intelligence

Latest Labs Blogs

Exploiting the Edge: Vulnerabilities in the Siemens SCALANCE LPE9403

Fuzzing Siemens PROFINET DCP: An Emulation-Driven Approach with Unicorn-AFL

KATARU: IoT Malware Adopts Public LPE Exploits

Take the next step.

Subscribe

LinkedIn

Demo

PLATFORM

Professional Services

Solutions: Business needs

Solutions: Compliance

Solutions: Industry

Learn