Advantech ADAM 3600 vulnerabilities
31 vulnerabilities
Known vulnerabilities in Advantech ADAM 3600, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-43856advantechadam-3600
EPSS score0.71%
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.CVE-2026-43855advantechadam-3600EPSS score0.59%
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.CVE-2026-43854advantechadam-3600EPSS score0.10%
A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.CVE-2026-43853advantechadam-3600EPSS score0.43%
A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.CVE-2026-43852advantechadam-3600EPSS score0.47%
A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.CVE-2026-43851advantechadam-3600EPSS score0.47%
A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.CVE-2026-43850advantechadam-3600EPSS score1.31%
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.CVE-2026-43849advantechadam-3600EPSS score0.43%
A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.CVE-2026-43858advantechadam-3600EPSS score0.74%
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.CVE-2026-43857advantechadam-3600EPSS score0.70%
A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.CVE-2026-43835advantechadam-3600EPSS score0.15%
A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.CVE-2026-43834advantechadam-3600EPSS score0.30%
A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.CVE-2026-43840advantechadam-3600EPSS score0.27%
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.CVE-2026-43839advantechadam-3600EPSS score0.27%
A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.CVE-2026-43838advantechadam-3600EPSS score0.31%
A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.CVE-2026-43837advantechadam-3600EPSS score0.37%
A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.CVE-2026-43836advantechadam-3600EPSS score0.62%
A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.CVE-2026-43845advantechadam-3600EPSS score0.34%
A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.CVE-2026-43844advantechadam-3600EPSS score0.41%
A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.CVE-2026-43843advantechadam-3600EPSS score0.27%
An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.