Vulnerabilities

TI-2024-26316 CVE-2024-39364 · GHSA-7pcw-cjv4-c788

Advantech ADAM-5630 Missing Authentication for Critical Function

LOW 30

Advantech ADAM-5630 has built-in commands that can be executed without authenticating the user.

CVSS 4.0HIGH 7.0 Adjacent network No auth User interaction EPSS 0.00219 Published 2024-09-27 Fixed in v2.5.2 CWE-306

TI-2024-22844 CVE-2024-34542 · GHSA-8mgj-fhf8-9275

LOW 30

Advantech ADAM-5630 shares user credentials plain text between the device and the user source device during the login process.

CVSS 4.0MEDIUM 6.9 Adjacent network No auth User interaction EPSS 0.00219 Published 2024-09-27 Fixed in v2.5.2 CWE-261

TI-2024-19141 CVE-2024-28948 · GHSA-64jg-5jxr-f8cr

LOW 38

Advantech ADAM-5630 contains a cross-site request forgery (CSRF) vulnerability.

CVSS 4.0HIGH 8.5 Adjacent network No auth User interaction EPSS 0.00217 Published 2024-09-27 Fixed in v2.5.2 CWE-352

TI-2024-26234 CVE-2024-39275 · GHSA-r29x-667c-gv4v

LOW 39

Cookies of authenticated Advantech ADAM-5630 users remain as active valid cookies when a session is closed.

CVSS 4.0HIGH 8.5 Adjacent network No auth User interaction EPSS 0.00411 Published 2024-09-27 Fixed in v2.5.2 CWE-539