Advantech Adam-3600 authorization issue vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have an authorization vulnerability. This vulnerability stems from proprietary protocols that allow attackers to perform unlimited brute-force attacks on administrator passwords, even when the SafeEnhancement feature is enabled...

Advantech Adam-3600 authorization issue vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have an authorization issue vulnerability. This vulnerability stems from problems with the password reset mechanism, which may allow attackers to bypass the authentication mechanism...

Advantech Adam-3600 path traversal vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a path traversal vulnerability. This vulnerability allows for attacks where path traversal is possible, potentially enabling authenticated attackers to access any file on the system...

Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer overflow vulnerability. This vulnerability stems from the FileProcess::CheckDir function, which has a stack-based buffer overflow. A remotely authenticated attacker can execute arbitrary code by using a path that exceeds 1024 bytes...

Advantech Adam-3600 code injection vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a code injection vulnerability. This vulnerability stems from code injection, and it may allow remotely authenticated attackers to execute arbitrary code with service privileges...

Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer overflow vulnerability. This vulnerability stems from a stack-based buffer overflow, which may allow authenticated attackers to execute arbitrary code...

Advantech Adam-3600 authorization issue vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have an authorization vulnerability. This vulnerability stems from a proprietary protocol that has authentication bypass issues, which may allow attackers to circumvent the authentication mechanism...

Advantech Adam-3600 security vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have security vulnerabilities. These vulnerabilities stem from a null pointer dereferencing in the ondisconnected callback function of the license manager service. This could allow unauthenticated attackers to cause the service to crash...

Advantech Adam-3600 resource management error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a resource management vulnerability. This vulnerability stems from issues with the batch port configuration function, which may allow unauthenticated attackers to cause the system to crash...

Advantech Adam-3600 digital error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a numerical error vulnerability. This vulnerability stems from an integer overflow in the license manager service, which could allow unauthenticated attackers to cause the service to crash...

Advantech Adam-3600 command injection vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a command injection vulnerability. This vulnerability stems from command injection, and it may allow authenticated attackers to execute root-level code on the system...

Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer error vulnerability. This vulnerability stems from issues with heap memory reading, which may allow attackers to disclose sensitive data...

Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer error vulnerability. This vulnerability stems from a stack buffer overflow, which may allow remote authenticated attackers to execute arbitrary code...

Advantech Adam-3600: Improper exception handling leads to vulnerabilities

The Advantech Adam-3600 versions prior to 2.8.5.0 have a vulnerability in exception handling. This vulnerability allows attackers to send specially crafted messages to trigger assertion failures, resulting in service crashes...

Advantech ADAM-6000 Use of Default Password (CVE-2008-5848)

The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an HTTP session, and 1 monitor or 2 control the module's Modbus/TCP I/O activity. This plugin only works with Tenable.ot. Please visit...

Advantech ADAM-5550 Weak Encoding For Password (CVE-2024-37187)

Advantech ADAM-5550 share user credentials with a low level of encryption, consisting of base 64 encoding. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Advantech ADAM-5630 Weak Encoding For Password (CVE-2024-34542)

Advantech ADAM-5630 shares user credentials plain text between the device and the user source device during the login process. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Information (CVE-2024-39275)

Cookies of authenticated Advantech ADAM-5630 users remain as active valid cookies when a session is closed. Forging requests with a legitimate cookie, even if the session was terminated, allows an unauthorized attacker to act with the same level of privileges of the legitimate user. This plugin...

Advantech ADAM-5630 Missing Authentication For Critical Function (CVE-2024-39364)

Advantech ADAM-5630 has built-in commands that can be executed without authenticating the user. These commands allow for restarting the operating system, rebooting the hardware, and stopping the execution. The commands can be sent to a simple HTTP request and are executed by the device...

Advantech ADAM-5630 Cross-Site Request Forgery (CVE-2024-28948)

Advantech ADAM-5630 contains a cross-site request forgery CSRF vulnerability. It allows an attacker to partly circumvent the same origin policy, which is designed to prevent different websites from interfering with each other. This plugin only works with Tenable.ot. Please visit...