Search Results (31 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-43835 1 Advantech 1 Adam-3600 2026-10-20 N/A
A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.
CVE-2026-43841 1 Advantech 1 Adam-3600 2026-10-20 N/A
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.
CVE-2026-43851 1 Advantech 1 Adam-3600 2026-10-20 N/A
A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
CVE-2026-43849 1 Advantech 1 Adam-3600 2026-10-20 N/A
A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.
CVE-2026-43847 1 Advantech 1 Adam-3600 2026-10-20 N/A
A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.
CVE-2026-43846 1 Advantech 1 Adam-3600 2026-10-20 N/A
A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.
CVE-2026-43844 1 Advantech 1 Adam-3600 2026-10-20 N/A
A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.
CVE-2026-43839 1 Advantech 1 Adam-3600 2026-10-20 N/A
A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.
CVE-2026-43837 1 Advantech 1 Adam-3600 2026-10-20 N/A
A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.
CVE-2026-43855 1 Advantech 1 Adam-3600 2026-10-20 N/A
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
CVE-2022-22987 1 Advantech 2 Adam-3600, Adam-3600 Firmware 2025-04-16 9.8 Critical
The affected product has a hardcoded private key available inside the project folder, which may allow an attacker to achieve Web Server login and perform further actions.