Adam 3600
Monthly
Stack-based buffer overflow in Advantech ADAM-3600 can let a remote attacker with administrative credentials execute arbitrary code on the RTU. The flaw is network-reachable and requires no user interaction, but exploitation depends on prior high-privilege access to the management interface and on network reachability, which is often constrained in segmented OT deployments. No public exploit was identified at time of analysis, and active exploitation is not confirmed by CISA KEV.
Arbitrary code execution on Advantech ADAM-3600 devices is possible for remote attackers who already possess high-privilege credentials for the device's network-reachable management service. The flaw affects ADAM-3600 units exposed to the attacker's network and carries a high CVSS score, but exploitation is not pre-authentication and depends on valid administrative or operator access. No public exploit identified at time of analysis, and the risk is credible but not emergency-level because privileged credentials and network reachability are both required.
Stack-based buffer overflow in Advantech ADAM-3600's FileProcess::CheckDir path handling lets an authenticated attacker with high-privilege access supply a directory path longer than 1024 bytes and potentially achieve arbitrary code execution on the device. The flaw is network-reachable with low complexity and no user interaction once the attacker holds the required high-privilege credentials, but impact is confined to the device with no scope change. No public exploit was identified at the time of analysis, and exploitation is primarily constrained by the high-privilege authentication prerequisite.
Heap-based buffer overflow in the Advantech ADAM-3600 remote terminal unit allows a network-reachable attacker who already holds high-privilege authenticated access to the device to corrupt heap memory and potentially achieve arbitrary code execution. The CVSS 4.0 vector (AV:N/AC:H/PR:H/UI:N, high confidentiality/integrity/availability impact) and the independent CVSS 3.1 assessment agree this is a post-authentication flaw requiring privileged credentials plus non-trivial heap grooming or a specific input path, so exploitation is not a trivial pre-auth network takeover. No public exploit code or CISA KEV entry is present in the available intelligence, and exploitation has not been confirmed in the wild; exact vulnerable firmware ranges are not specified in the input and must be scoped from the Advantech security advisory.
The Advantech ADAM-3600 industrial RTU/edge controller can be crashed by a remotely delivered crafted message that triggers an assertion fault, causing a denial of service limited to availability. No authentication or user interaction is required (PR:N/UI:N), but exploitation depends on network reachability to the affected service and on a specific precondition (AT:P) for the fault to fire. No public exploit code or CISA KEV entry was identified at time of analysis.
Arbitrary file write in Advantech ADAM-3600 lets an authenticated attacker with high-privilege operator or administrator credentials and network access to the device management interface write files to arbitrary system locations, compromising device integrity and potentially that of a subsequent system. The assessed impact is integrity-only, with no confidentiality or availability impact, and a CVSS 4.0 base score of 8.2. No public exploit was identified at time of analysis, and exploitation is gated by the need for valid privileged credentials.
Advantech ADAM-3600 industrial remote terminal units expose a path traversal flaw that allows a high-privileged authenticated user to read arbitrary files from the device filesystem over the network. This is a moderate-priority issue because exploitation requires a valid high-privilege session and network reachability to the management interface, which are constrained in segmented OT deployments; no public exploit identified at time of analysis, and the vendor advisory plus a CSA alert are available.
Authenticated, high-privilege users of the Advantech ADAM-3600 industrial edge gateway can exploit a command injection flaw in the device’s command-handling functionality to execute arbitrary OS commands with root privileges, achieving full device compromise. The network-reachable flaw has a CVSS 4.0 score of 8.6 (PR:H, UI:N, AC:L) and, per the independent assessment, is not accessible to anonymous remote attackers because valid administrative credentials or a privileged session are required. No public exploit was identified at the time of analysis, and the device’s usual placement inside segmented OT/ICS networks limits exposure, although the exact vulnerable interface and affected firmware versions were not specified.
The Advantech ADAM-3600 intelligent remote I/O module exposes a proprietary management protocol in which the SafeEnhancement protection feature fails to enforce login lockout or rate limiting, so remote attackers can repeatedly guess the administrator password until it is recovered even with the hardening option turned on. Successful guessing yields high-impact confidentiality, integrity, and availability loss on the device (CVSS 3.1 base 8.2, AV:N/AC:H/PR:N/UI:N), although exploitation is gated by attack complexity: the adversary must reach the device's protocol port and correctly implement that proprietary protocol, and the outcome depends on administrator password strength and available attack time. The issue is reported by Singapore's CSA, affects ADAM-3600 units per the wildcard CPE, and has no confirmed CISA KEV listing or public exploit code - no public exploit identified at time of analysis - with no EPSS score supplied in the available intelligence.
Stack-based buffer overflow in Advantech ADAM-3600 industrial remote I/O modules lets a high-privileged authenticated attacker execute arbitrary code on the device. Reaching the flaw requires operator-level credentials and invocation of a specific feature the vendor characterizes as non-functional, so the realistic attack surface is limited to insiders or attackers who have already compromised privileged access - the network vector and low attack complexity mean no user interaction is needed once those prerequisites are met. No public exploit code or confirmed active exploitation was identified at time of analysis, and EPSS/KEV data was not provided.
Authentication bypass in Advantech ADAM-3600 enables unauthenticated network attackers to abuse the password-reset mechanism and gain unauthorized access, with high confidentiality, integrity, and availability impact; CVSS 4.0 scores this 9.2, while our independent CVSS 3.1 assessment rates it high with AC:H because a specific precondition in the reset flow must be met (AT:P). No public exploit code has been identified at time of analysis, and exploitation depends on network reachability to the controller's management/reset interface; OT segmentation substantially reduces exposure. This is a high priority for affected ICS/OT environments where ADAM-3600 devices are internet-facing or reachable from compromised IT segments.
Authentication bypass in Advantech ADAM-3600 remote terminal units allows unauthenticated network attackers to bypass the proprietary protocol's authentication mechanism and potentially achieve high impact on confidentiality, integrity, and availability (CVSS 9.3; assessed CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The flaw is remotely reachable with no credentials or user interaction, but realistic risk depends on whether the device's proprietary protocol service is exposed beyond segmented OT/field networks. No public exploit code or CISA KEV entry was identified at time of analysis, and EPSS data was not provided.
Unauthenticated remote attackers can crash the logs management service on Advantech ADAM-3600 industrial RTUs/controllers by sending crafted input that triggers a NULL pointer dereference, denying access to that service until it is restarted. The CVSS:3.1 vector indicates network-reachable, low-complexity exploitation with no privileges or user interaction required, but impact is confined to availability - no code execution, data disclosure, or integrity loss is implied by the flaw itself. No public exploit code or confirmed active exploitation was identified at time of analysis, and practical risk is primarily gated by whether the device's logs management interface is exposed beyond a segmented OT/SCADA network.
Unauthenticated remote code execution is possible against the Advantech ADAM-3600 through a stack-based buffer overflow in its login handling. The device is rated Critical (vendor CVSS 4.0 score 9.2; assessed CVSS 3.1 vector AV:N/AC:H/PR:N/UI:N/C:H/I:H/A:H), but reliable exploitation is constrained by high attack complexity and by whether the login service is reachable from untrusted networks. No public exploit was identified at time of analysis.
Code execution in Advantech ADAM-3600 industrial controllers can be achieved by exploiting a buffer overflow in the password verification routine, but an attacker must first hold guest-level credentials. The issue is network-reachable and high-complexity, with a CVSS 4.0 score of 7.5; our independent assessment uses CVSS 3.1 with PR:L, suggesting the real authentication barrier may be lower than the vendor vector's PR:H indicates. No public exploit identified at time of analysis.
Forged network packets sent to the Advantech ADAM-3600 remote terminal unit (RTU) can trigger arbitrary command execution at maximum (administrative/root) privilege, giving an unauthenticated remote attacker full control of the device. The flaw is rated 9.3 under CVSS 4.0 and corroborated by an independent assessment of CVSS 3.1 AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:H - no authentication, no user interaction, and no non-default configuration are required, so a single crafted packet against a default-configured unit is sufficient. Exploitation is bounded mainly by network reachability: these RTUs normally sit on segmented OT/SCADA networks, but any unit exposed to the internet or reachable from a compromised IT/DMZ segment is directly at risk. No public exploit code or CISA KEV entry was identified at time of analysis, and no EPSS score was supplied; CSA Singapore (AL-2026-149) and Advantech have published advisories. This is a genuinely high-priority flaw, not a high-CVSS-but-low-real-risk case.
A privileged, authenticated attacker who can reach the Advantech ADAM-3600 firmware upgrade function can upload a forged firmware image and achieve persistent compromise of the device. The issue is rated CVSS 4.0 8.6 (HIGH) with network reachability and high confidentiality, integrity, and availability impact, but exploitation requires high privileges (PR:H); no CISA KEV entry or public exploit code is identified in the supplied data.
Code execution in Advantech ADAM-3600 can be achieved by an authenticated attacker with high privileges who supplies crafted input to the device's logs settings functionality, triggering a stack-based buffer overflow. The flaw is network-reachable but requires valid administrative or operator access and high attack complexity, so real-world risk is moderate-priority and concentrated in OT environments where the management interface is exposed or privileged credentials are compromised. No public exploit code or confirmed active exploitation was identified at time of analysis, and Advantech's security advisory should be consulted for fixed firmware.
Administrator credentials for EdgeLink-enabled Advantech ADAM-3600 devices can be recovered from an encrypted project file, exposing sensitive device management secrets to anyone who obtains that engineering artifact. The issue is a moderate, conditional information-disclosure risk: exploitation requires local access and prior possession of the project file, which is normally confined to operator workstations, backups, or repositories, and there is no remote unauthenticated path. No public exploit code or confirmed active exploitation was identified at time of analysis, and no EPSS score was provided.
Heap memory disclosure in Advantech ADAM-3600 industrial remote terminal units lets remote attackers read beyond the bounds of allocated heap buffers and exfiltrate whatever sensitive data resides in adjacent memory. The supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N, VC:L only) indicates the flaw is reachable over the network without authentication or user interaction against an exposed device, but impact is confined to confidentiality - no integrity or availability effect. No public exploit code and no confirmed active exploitation were identified at time of analysis; realistic risk is governed less by the software flaw than by whether the RTU is reachable from an untrusted network, since these OT devices are normally shielded by ICS segmentation.
Unauthenticated remote attackers can crash the bulk port configuration service on Advantech ADAM-3600 edge controllers, causing a limited denial-of-service condition with no confidentiality or integrity impact. The flaw is network-reachable and requires no user interaction, but practical risk depends on whether the device's configuration service is exposed beyond properly segmented ICS/OT networks. No public exploit code has been identified at time of analysis, and the issue is availability-only rather than remote code execution.
Denial of service in Advantech ADAM-3600's license manager service allows unauthenticated network attackers to crash the service by triggering an integer overflow. The CVSS 4.0 score of 6.9 reflects network reachability with low availability impact only-no confidentiality or integrity effect-and no public exploit code or CISA KEV entry was identified at time of analysis. Because ADAM-3600 is an industrial RTU typically placed on segmented OT/field networks, realistic exploitation depends on attacker access to a connected control network or poor segmentation.
Unauthenticated remote attackers who can reach the Advantech ADAM-3600 license manager RPC service can crash it by sending a crafted message with msglen set to 0, triggering a NULL pointer dereference in rpc_rx_fsm. The flaw affects ADAM-3600 industrial RTUs and is availability-only, with no code execution, data disclosure, or integrity impact; no public exploit identified at time of analysis. Because the device is typically deployed on segmented ICS/OT networks, exposure is usually limited, making this a medium-severity denial-of-service issue rather than a critical compromise vector.
Unauthenticated remote attackers can crash the license manager service on Advantech ADAM-3600 by sending crafted RPC messages that trigger a NULL pointer dereference in the rpc_rx_fsm function, causing an availability-only denial of service. The provided CVSS 4.0 score is 6.9, while the assessed CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L, reinforcing that confidentiality and integrity are not affected. No public exploit was identified at time of analysis, and practical risk depends on whether the device's license manager RPC service is reachable from untrusted networks.
Denial of service in Advantech ADAM-3600 can be triggered by an unauthenticated remote attacker who opens and then disconnects a connection to the license manager service, invoking the on_disconnected callback and causing a NULL pointer dereference that crashes the service. The supplied CVSS 4.0 score is 6.9 (AV:N/AC:L/PR:N/UI:N/VA:L), and the independent assessment rates availability impact as Low with no confidentiality or integrity impact; this is a moderate-severity availability issue rather than a code-execution or data-access flaw. No public exploit identified at time of analysis.
Stack-based buffer overflow in Advantech ADAM-3600 can let a remote attacker with administrative credentials execute arbitrary code on the RTU. The flaw is network-reachable and requires no user interaction, but exploitation depends on prior high-privilege access to the management interface and on network reachability, which is often constrained in segmented OT deployments. No public exploit was identified at time of analysis, and active exploitation is not confirmed by CISA KEV.
Arbitrary code execution on Advantech ADAM-3600 devices is possible for remote attackers who already possess high-privilege credentials for the device's network-reachable management service. The flaw affects ADAM-3600 units exposed to the attacker's network and carries a high CVSS score, but exploitation is not pre-authentication and depends on valid administrative or operator access. No public exploit identified at time of analysis, and the risk is credible but not emergency-level because privileged credentials and network reachability are both required.
Stack-based buffer overflow in Advantech ADAM-3600's FileProcess::CheckDir path handling lets an authenticated attacker with high-privilege access supply a directory path longer than 1024 bytes and potentially achieve arbitrary code execution on the device. The flaw is network-reachable with low complexity and no user interaction once the attacker holds the required high-privilege credentials, but impact is confined to the device with no scope change. No public exploit was identified at the time of analysis, and exploitation is primarily constrained by the high-privilege authentication prerequisite.
Heap-based buffer overflow in the Advantech ADAM-3600 remote terminal unit allows a network-reachable attacker who already holds high-privilege authenticated access to the device to corrupt heap memory and potentially achieve arbitrary code execution. The CVSS 4.0 vector (AV:N/AC:H/PR:H/UI:N, high confidentiality/integrity/availability impact) and the independent CVSS 3.1 assessment agree this is a post-authentication flaw requiring privileged credentials plus non-trivial heap grooming or a specific input path, so exploitation is not a trivial pre-auth network takeover. No public exploit code or CISA KEV entry is present in the available intelligence, and exploitation has not been confirmed in the wild; exact vulnerable firmware ranges are not specified in the input and must be scoped from the Advantech security advisory.
The Advantech ADAM-3600 industrial RTU/edge controller can be crashed by a remotely delivered crafted message that triggers an assertion fault, causing a denial of service limited to availability. No authentication or user interaction is required (PR:N/UI:N), but exploitation depends on network reachability to the affected service and on a specific precondition (AT:P) for the fault to fire. No public exploit code or CISA KEV entry was identified at time of analysis.
Arbitrary file write in Advantech ADAM-3600 lets an authenticated attacker with high-privilege operator or administrator credentials and network access to the device management interface write files to arbitrary system locations, compromising device integrity and potentially that of a subsequent system. The assessed impact is integrity-only, with no confidentiality or availability impact, and a CVSS 4.0 base score of 8.2. No public exploit was identified at time of analysis, and exploitation is gated by the need for valid privileged credentials.
Advantech ADAM-3600 industrial remote terminal units expose a path traversal flaw that allows a high-privileged authenticated user to read arbitrary files from the device filesystem over the network. This is a moderate-priority issue because exploitation requires a valid high-privilege session and network reachability to the management interface, which are constrained in segmented OT deployments; no public exploit identified at time of analysis, and the vendor advisory plus a CSA alert are available.
Authenticated, high-privilege users of the Advantech ADAM-3600 industrial edge gateway can exploit a command injection flaw in the device’s command-handling functionality to execute arbitrary OS commands with root privileges, achieving full device compromise. The network-reachable flaw has a CVSS 4.0 score of 8.6 (PR:H, UI:N, AC:L) and, per the independent assessment, is not accessible to anonymous remote attackers because valid administrative credentials or a privileged session are required. No public exploit was identified at the time of analysis, and the device’s usual placement inside segmented OT/ICS networks limits exposure, although the exact vulnerable interface and affected firmware versions were not specified.
The Advantech ADAM-3600 intelligent remote I/O module exposes a proprietary management protocol in which the SafeEnhancement protection feature fails to enforce login lockout or rate limiting, so remote attackers can repeatedly guess the administrator password until it is recovered even with the hardening option turned on. Successful guessing yields high-impact confidentiality, integrity, and availability loss on the device (CVSS 3.1 base 8.2, AV:N/AC:H/PR:N/UI:N), although exploitation is gated by attack complexity: the adversary must reach the device's protocol port and correctly implement that proprietary protocol, and the outcome depends on administrator password strength and available attack time. The issue is reported by Singapore's CSA, affects ADAM-3600 units per the wildcard CPE, and has no confirmed CISA KEV listing or public exploit code - no public exploit identified at time of analysis - with no EPSS score supplied in the available intelligence.
Stack-based buffer overflow in Advantech ADAM-3600 industrial remote I/O modules lets a high-privileged authenticated attacker execute arbitrary code on the device. Reaching the flaw requires operator-level credentials and invocation of a specific feature the vendor characterizes as non-functional, so the realistic attack surface is limited to insiders or attackers who have already compromised privileged access - the network vector and low attack complexity mean no user interaction is needed once those prerequisites are met. No public exploit code or confirmed active exploitation was identified at time of analysis, and EPSS/KEV data was not provided.
Authentication bypass in Advantech ADAM-3600 enables unauthenticated network attackers to abuse the password-reset mechanism and gain unauthorized access, with high confidentiality, integrity, and availability impact; CVSS 4.0 scores this 9.2, while our independent CVSS 3.1 assessment rates it high with AC:H because a specific precondition in the reset flow must be met (AT:P). No public exploit code has been identified at time of analysis, and exploitation depends on network reachability to the controller's management/reset interface; OT segmentation substantially reduces exposure. This is a high priority for affected ICS/OT environments where ADAM-3600 devices are internet-facing or reachable from compromised IT segments.
Authentication bypass in Advantech ADAM-3600 remote terminal units allows unauthenticated network attackers to bypass the proprietary protocol's authentication mechanism and potentially achieve high impact on confidentiality, integrity, and availability (CVSS 9.3; assessed CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The flaw is remotely reachable with no credentials or user interaction, but realistic risk depends on whether the device's proprietary protocol service is exposed beyond segmented OT/field networks. No public exploit code or CISA KEV entry was identified at time of analysis, and EPSS data was not provided.
Unauthenticated remote attackers can crash the logs management service on Advantech ADAM-3600 industrial RTUs/controllers by sending crafted input that triggers a NULL pointer dereference, denying access to that service until it is restarted. The CVSS:3.1 vector indicates network-reachable, low-complexity exploitation with no privileges or user interaction required, but impact is confined to availability - no code execution, data disclosure, or integrity loss is implied by the flaw itself. No public exploit code or confirmed active exploitation was identified at time of analysis, and practical risk is primarily gated by whether the device's logs management interface is exposed beyond a segmented OT/SCADA network.
Unauthenticated remote code execution is possible against the Advantech ADAM-3600 through a stack-based buffer overflow in its login handling. The device is rated Critical (vendor CVSS 4.0 score 9.2; assessed CVSS 3.1 vector AV:N/AC:H/PR:N/UI:N/C:H/I:H/A:H), but reliable exploitation is constrained by high attack complexity and by whether the login service is reachable from untrusted networks. No public exploit was identified at time of analysis.
Code execution in Advantech ADAM-3600 industrial controllers can be achieved by exploiting a buffer overflow in the password verification routine, but an attacker must first hold guest-level credentials. The issue is network-reachable and high-complexity, with a CVSS 4.0 score of 7.5; our independent assessment uses CVSS 3.1 with PR:L, suggesting the real authentication barrier may be lower than the vendor vector's PR:H indicates. No public exploit identified at time of analysis.
Forged network packets sent to the Advantech ADAM-3600 remote terminal unit (RTU) can trigger arbitrary command execution at maximum (administrative/root) privilege, giving an unauthenticated remote attacker full control of the device. The flaw is rated 9.3 under CVSS 4.0 and corroborated by an independent assessment of CVSS 3.1 AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:H - no authentication, no user interaction, and no non-default configuration are required, so a single crafted packet against a default-configured unit is sufficient. Exploitation is bounded mainly by network reachability: these RTUs normally sit on segmented OT/SCADA networks, but any unit exposed to the internet or reachable from a compromised IT/DMZ segment is directly at risk. No public exploit code or CISA KEV entry was identified at time of analysis, and no EPSS score was supplied; CSA Singapore (AL-2026-149) and Advantech have published advisories. This is a genuinely high-priority flaw, not a high-CVSS-but-low-real-risk case.
A privileged, authenticated attacker who can reach the Advantech ADAM-3600 firmware upgrade function can upload a forged firmware image and achieve persistent compromise of the device. The issue is rated CVSS 4.0 8.6 (HIGH) with network reachability and high confidentiality, integrity, and availability impact, but exploitation requires high privileges (PR:H); no CISA KEV entry or public exploit code is identified in the supplied data.
Code execution in Advantech ADAM-3600 can be achieved by an authenticated attacker with high privileges who supplies crafted input to the device's logs settings functionality, triggering a stack-based buffer overflow. The flaw is network-reachable but requires valid administrative or operator access and high attack complexity, so real-world risk is moderate-priority and concentrated in OT environments where the management interface is exposed or privileged credentials are compromised. No public exploit code or confirmed active exploitation was identified at time of analysis, and Advantech's security advisory should be consulted for fixed firmware.
Administrator credentials for EdgeLink-enabled Advantech ADAM-3600 devices can be recovered from an encrypted project file, exposing sensitive device management secrets to anyone who obtains that engineering artifact. The issue is a moderate, conditional information-disclosure risk: exploitation requires local access and prior possession of the project file, which is normally confined to operator workstations, backups, or repositories, and there is no remote unauthenticated path. No public exploit code or confirmed active exploitation was identified at time of analysis, and no EPSS score was provided.
Heap memory disclosure in Advantech ADAM-3600 industrial remote terminal units lets remote attackers read beyond the bounds of allocated heap buffers and exfiltrate whatever sensitive data resides in adjacent memory. The supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N, VC:L only) indicates the flaw is reachable over the network without authentication or user interaction against an exposed device, but impact is confined to confidentiality - no integrity or availability effect. No public exploit code and no confirmed active exploitation were identified at time of analysis; realistic risk is governed less by the software flaw than by whether the RTU is reachable from an untrusted network, since these OT devices are normally shielded by ICS segmentation.
Unauthenticated remote attackers can crash the bulk port configuration service on Advantech ADAM-3600 edge controllers, causing a limited denial-of-service condition with no confidentiality or integrity impact. The flaw is network-reachable and requires no user interaction, but practical risk depends on whether the device's configuration service is exposed beyond properly segmented ICS/OT networks. No public exploit code has been identified at time of analysis, and the issue is availability-only rather than remote code execution.
Denial of service in Advantech ADAM-3600's license manager service allows unauthenticated network attackers to crash the service by triggering an integer overflow. The CVSS 4.0 score of 6.9 reflects network reachability with low availability impact only-no confidentiality or integrity effect-and no public exploit code or CISA KEV entry was identified at time of analysis. Because ADAM-3600 is an industrial RTU typically placed on segmented OT/field networks, realistic exploitation depends on attacker access to a connected control network or poor segmentation.
Unauthenticated remote attackers who can reach the Advantech ADAM-3600 license manager RPC service can crash it by sending a crafted message with msglen set to 0, triggering a NULL pointer dereference in rpc_rx_fsm. The flaw affects ADAM-3600 industrial RTUs and is availability-only, with no code execution, data disclosure, or integrity impact; no public exploit identified at time of analysis. Because the device is typically deployed on segmented ICS/OT networks, exposure is usually limited, making this a medium-severity denial-of-service issue rather than a critical compromise vector.
Unauthenticated remote attackers can crash the license manager service on Advantech ADAM-3600 by sending crafted RPC messages that trigger a NULL pointer dereference in the rpc_rx_fsm function, causing an availability-only denial of service. The provided CVSS 4.0 score is 6.9, while the assessed CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L, reinforcing that confidentiality and integrity are not affected. No public exploit was identified at time of analysis, and practical risk depends on whether the device's license manager RPC service is reachable from untrusted networks.
Denial of service in Advantech ADAM-3600 can be triggered by an unauthenticated remote attacker who opens and then disconnects a connection to the license manager service, invoking the on_disconnected callback and causing a NULL pointer dereference that crashes the service. The supplied CVSS 4.0 score is 6.9 (AV:N/AC:L/PR:N/UI:N/VA:L), and the independent assessment rates availability impact as Low with no confidentiality or integrity impact; this is a moderate-severity availability issue rather than a code-execution or data-access flaw. No public exploit identified at time of analysis.