Adam-3600 (Advantech) - vulnerabilities (CVEs)

31 CVEs, 25 in the last 30 days, 2 known versions, newest CVE from 2026-10-20. Vendor: Advantech.

CVEs of Adam-3600

• CVE-2026-43858 - CVSS 8.6 (high), 2026-10-20: A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
• CVE-2026-43857 - CVSS 8.6 (high), 2026-10-20: A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.
• CVE-2026-43856 - CVSS 8.6 (high), 2026-10-20: A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code…
• CVE-2026-43855 - CVSS 7.5 (high), 2026-10-20: A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
• CVE-2026-43854 - CVSS 6.3 (medium), 2026-10-20: A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.
• CVE-2026-43853 - CVSS 8.2 (high), 2026-10-20: A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.
• CVE-2026-43852 - CVSS 8.2 (high), 2026-10-20: A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
• CVE-2026-43851 - CVSS 8.2 (high), 2026-10-20: A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
• CVE-2026-43850 - CVSS 8.6 (high), 2026-10-20: A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.
• CVE-2026-43849 - CVSS 6.9 (medium), 2026-10-20: A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.
• CVE-2026-43848 - CVSS 6.9 (medium), 2026-10-20: A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.
• CVE-2026-43847 - CVSS 8.2 (high), 2026-10-20: A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the…
• CVE-2026-43846 - CVSS 8.6 (high), 2026-10-20: A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.
• CVE-2026-43845 - CVSS 9.2 (critical), 2026-10-20: A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
• CVE-2026-43844 - CVSS 9.3 (critical), 2026-10-20: A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.
• CVE-2026-43843 - CVSS 6.9 (medium), 2026-10-20: An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.
• CVE-2026-43842 - CVSS 6.9 (medium), 2026-10-20: A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm…
• CVE-2026-43841 - CVSS 6.9 (medium), 2026-10-20: A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm…
• CVE-2026-43840 - CVSS 6.9 (medium), 2026-10-20: A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected…
• CVE-2026-43839 - CVSS 8.7 (high), 2026-10-20: A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.
• CVE-2026-43838 - CVSS 9.2 (critical), 2026-10-20: A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.
• CVE-2026-43837 - CVSS 7.5 (high), 2026-10-20: A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.
• CVE-2026-43836 - CVSS 9.3 (critical), 2026-10-20: A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.
• CVE-2026-43835 - CVSS 8.6 (high), 2026-10-20: A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising…
• CVE-2026-43834 - CVSS 7.5 (high), 2026-10-20: A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.
• CVE-2026-43833 - CVSS 7.5 (high), 2026-07-31: A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution.
• CVE-2026-43832 - CVSS 9.2 (critical), 2026-07-31: A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the…
• CVE-2026-43831 - CVSS 9.2 (critical), 2026-07-31: A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution.
• CVE-2026-43830 - CVSS 9.8 (critical), 2026-07-31: A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands.
• CVE-2026-43829 - CVSS 9.2 (critical), 2026-07-31: A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the…
• CVE-2022-22987 - CVSS 9.8 (critical), 2022-02-04: The affected product has a hardcoded private key available inside the project folder, which may allow an attacker to achieve Web Server login and perform…