Heap-Based Buffer Overflow in Advantech ADAM-3600 Allows Arbitrary Code Execution

A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.

Null Pointer Dereference Causing Service Crash in Advantech ADAM-3600 License Manager

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.

Authenticated Path Traversal Vulnerability Enabling Arbitrary File Read on Advantech ADAM-3600

A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.

Heap Memory Read Allows Sensitive Data Exfiltration in Advantech ADAM-3600

A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.

Brute-Force Administrator Password Vulnerability in Advantech ADAM‑3600 Proprietary Protocol

A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.

Stack‑Based Buffer Overflow Vulnerability in Advantech ADAM‑3600

A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.

Authentication Bypass in the Proprietary Protocol of Advantech ADAM-3600

A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.

NULL Pointer Dereference in Logs Management Functionality

A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.

Buffer Overflow in Advantech ADAM‑3600 Password Verification Enables Code Execution with Guest Authentication

A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.

Advantech ADAM-3600

The affected product has a hardcoded private key available inside the project folder, which may allow an attacker to achieve Web Server login and perform further actions.