Skip to content
OpenAdvisories
High · 8.8 CVE-2024-38308 EUVD-2024-37259GHSA-9xg3-36cq-7vr7

Advantech ADAM-5550 Cross-site Scripting

Published Sep 27, 2024 · Updated Sep 27, 2024 · Assigned by icscert

Description

Advantech ADAM 5550's web application includes a "logs" page where all
the HTTP requests received are displayed to the user. The device doesn't
correctly neutralize malicious code when parsing HTTP requests to
generate page output.

Affected products

VendorProductAffectedFixed
Advantech ADAM 5550 all versions —

Advisories 1

References