This vulnerability, identified as CWE-319, affects the edgserver management protocol in Advantech EKI-1242IEIMS devices running firmware version 1.06.01 or earlier. It allows an attacker positioned on the same network segment to passively capture management traffic transmitted in cleartext. This exposure enables recovery of sensitive device identity information and network metadata, potentially aiding further reconnaissance or targeted attacks.

An attacker with network adjacency can intercept management traffic and obtain sensitive device identity and network metadata in cleartext. This exposure compromises confidentiality of management communications but does not indicate direct control or code execution capabilities. No known exploits are reported in the wild.

No official patch or remediation is currently documented. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting network access to management interfaces to trusted segments and using network-level encryption or VPNs to protect management traffic.