Skip to content
OpenAdvisories

Product · Advantech

ADAM-3600

31 known vulnerabilities.

ADAM-3600 at a glance

Last 12 months
30
Critical · all time
8
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 13 25 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 5 vulnerabilities, 3 critical August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 25 vulnerabilities, 4 critical November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 2026254
Sep 202600
Aug 202600
Jul 202653
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Latest advisories

  • Critical max 9.8

    Advantech ADAM-3600

    Successful exploitation of this vulnerability could allow unauthorized access to intercept traffic using the hardcoded key. This could allow an attacker to achieve Web Server login and perform further actions.

31 results · Feed

  • High 8.6

    A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execu…

  • High 8.6

    A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the …

  • High 8.6

    A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated at…

  • High 7.5

    A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execut…

  • Medium 6.3

    A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials …

  • High 8.2

    A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to…

  • High 8.2

    A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.

  • High 8.2

    A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.

  • High 8.6

    A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the sys…

  • Medium 6.9

    A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.

  • Medium 6.9

    A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the servi…

  • High 8.2

    A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without r…

  • High 8.6

    A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achiev…

  • Critical 9.2

    A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.

  • Critical 9.3

    A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.

  • Medium 6.9

    An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the s…

  • Medium 6.9

    A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to cras…

  • Medium 6.9

    A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to cras…

  • Medium 6.9

    A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to cras…

  • High 8.7

    A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker t…

  • Critical 9.2

    A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code executio…

  • High 7.5

    A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentic…

  • Critical 9.3

    A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.

  • High 8.6

    A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware…

  • High 7.5

    A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to…

  • High 7.5

    A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achiev…

  • Critical 9.2

    A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to ac…

  • Critical 9.2

    A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to…

  • High 8.6

    A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute …

  • Critical 9.2

    A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to ac…

  • Critical 9.8

    Advantech ADAM-3600

    The affected product has a hardcoded private key available inside the project folder, which may allow an attacker to achieve Web Server login and perform further actions.