Description
Cookies of authenticated Advantech ADAM-5630 users remain as active valid cookies when a
session is closed. Forging requests with a legitimate cookie, even if
the session was terminated, allows an unauthorized attacker to act with
the same level of privileges of the legitimate user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Advantech | ADAM-5630 | < v2.5.2 | v2.5.2 |
Advisories 1
- ICSA-24-270-02 Advantech ADAM 5630 CISA ICS & IT advisories · Sep 26, 2024