Advantech Adam 5630 vulnerabilities
4 vulnerabilities
Known vulnerabilities in Advantech Adam 5630, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-39275advantech · adam-5630_firmwareAdvantech ADAM-5630 Use of Persistent Cookies Containing Sensitive InformationCookies of authenticated Advantech ADAM-5630 users remain as active valid cookies when a
session is closed. Forging requests with a legitimate cookie, even if
the session was terminated, allows an unauthorized attacker to act with
the same level of privileges of the legitimate user.EPSS0.41%HighCVE-2024-39364advantech · adam-5630_firmwareAdvantech ADAM-5630 Missing Authentication for Critical FunctionAdvantech ADAM-5630
has built-in commands that can be executed without authenticating the
user. These commands allow for restarting the operating system,
rebooting the hardware, and stopping the execution. The commands can be
sent to a simple HTTP request and are executed by the device
automatically, without discrimination of origin or level of privileges
of the user sending the commands.EPSS0.22%HighCVE-2024-28948advantech · adam-5630_firmwareAdvantech ADAM-5630 Cross-Site Request ForgeryAdvantech ADAM-5630 contains a cross-site request forgery (CSRF) vulnerability. It allows an attacker to partly circumvent the same
origin policy, which is designed to prevent different websites from
interfering with each other.EPSS0.22%MediumCVE-2024-34542advantech · adam-5630_firmwareAdvantech ADAM-5630 Weak Encoding for PasswordAdvantech ADAM-5630 shares user credentials plain text between the device and the user source device during the login process.EPSS0.22%