ADAM-3600 vulnerabilities
7 known vulnerabilities in ADAM-3600 from Advantech. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.6 High severity
ADAM-3600: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.
- 8.2 High severity
ADAM-3600: Improper Restriction of Excessive Authentication Attempts
A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.
- 7.5 High severity
ADAM-3600: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.
- 8.6 High severity
ADAM-3600: Insufficient Verification of Data Authenticity
A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.
- 9.2 Critical severity
ADAM-3600: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled.
- 9.2 Critical severity
ADAM-3600: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled.
- 9.8 Critical severity
ADAM-3600: Use of Hard-coded Credentials
The affected product has a hardcoded private key available inside the project folder, which may allow an attacker to achieve Web Server login and perform further actions.