Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-39364 EUVD-2024-37920GHSA-7pcw-cjv4-c788

Advantech ADAM-5630 Missing Authentication for Critical Function

Published Sep 27, 2024 · Updated Sep 27, 2024 · Assigned by icscert

Description

Advantech ADAM-5630
has built-in commands that can be executed without authenticating the
user. These commands allow for restarting the operating system,
rebooting the hardware, and stopping the execution. The commands can be
sent to a simple HTTP request and are executed by the device
automatically, without discrimination of origin or level of privileges
of the user sending the commands.

Affected products

VendorProductAffectedFixed
Advantech ADAM-5630 < v2.5.2 v2.5.2

Advisories 1

References