Advantech｜Hospital Queuing Management - Sensitive Data Exposure

Hospital Quening Management developed by Advantech has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access a specific URL to obtain API documentation.

A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled.

A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands.

A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution.

A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled.

Stack-Based Buffer Overflow in Upload Functionality Allowing Authenticated Code Execution

A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution.

Stack-based Buffer Overflow in Logs Settings of Advantech ADAM-3600

A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.

Stack-Based Buffer Overflow in ADAM‑3600 CheckDir Function Allows Remote Code Execution

A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.

Credential Disclosure via Encrypted Project File on Advantech ADAM‑3600

A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.

Stack-based Buffer Overflow in Advantech ADAM‑3600 Allows Remote Authenticated Code Execution

A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.

Stack-Based Buffer Overflow in Advantech ADAM-3600 Login Function

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.

Bulk Port Configuration Vulnerability Causes Service Crash on Advantech ADAM‑3600

A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.

Command Injection Vulnerability Allowing Authenticated Root-Level Code Execution on Advantech ADAM-3600

A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.

Authenticated Arbitrary File Write in Advantech ADAM-3600

A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.

Assertion Fault Crash Causing Denial of Service in Advantech ADAM-3600 Firmware

A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.

Packet Forgery Vulnerability Enabling Remote Command Execution on Advantech ADAM‑3600

A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.

An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.

Password Reset Mechanism Bypass Enables Authentication Breach

A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.

A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.

NULL Pointer Dereference in Advantech ADAM‑3600 License Manager Service Allows Crash

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.