A stack-based buffer overflow in the password handling of the Advantech ADAM‑3600 enables code execution for an unauthenticated attacker when SafeEnhancement is enabled. The CVSS score of 9.2 signals critical severity. The flaw is classified as CWE‑121. The detailed exploitation method has not been publicly disclosed, but the wording indicates that malformed password input can corrupt the stack, potentially allowing arbitrary code execution. The exact conditions remain unspecified beyond the presence of the unsafe password functionality.

Advantech ADAM‑3600 is affected. Specific version information is not disclosed in the available data; users should consult the vendor’s advisories for detailed version guidance.

The CVSS score of 9.2 signals a critical threat, yet the EPSS score of less than 1% indicates a low likelihood of active exploitation. The vulnerability is not listed in CISA’s KEV catalog, suggesting no known exploitation. The attack vector is not defined, so it is inferred that exploitation would require remote network access to deliver malformed data to the password component while the SafeEnhancement feature is enabled, but the exact conditions remain unknown until more details are published.