Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2024-39364

Advantech ADAM-5630 Missing Authentication for Critical Function

Description

Advantech ADAM-5630 has built-in commands that can be executed without authenticating the user. These commands allow for restarting the operating system, rebooting the hardware, and stopping the execution. The commands can be sent to a simple HTTP request and are executed by the device automatically, without discrimination of origin or level of privileges of the user sending the commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Advantech ADAM-5630

Default version status: unaffected

  • 0 to < v2.5.2affected

References