The vulnerability is a stack‑based buffer overflow (CWE‑121) in the log message handling of Advantech ADAM‑3600 devices. The flaw can be triggered by malformed log entries and allows an unauthenticated attacker to execute arbitrary code on the target system. The updated CVSS score of 9.2 indicates a very high impact if exploited, affecting confidentiality, integrity, and availability of the compromised device.

Advantech ADAM‑3600 is the affected product. The CNA lists this as a single vendor/product pair, and no specific version data is supplied. Users running any current or older ADAM‑3600 firmware should verify if the vulnerability is present and assess whether upgrades are needed.

The absolute CVSS score of 9.2 signifies a very high severity vulnerability. The EPSS score is reported as less than 1 %, indicating that exploitation is currently unlikely but possible. The vulnerability is not listed in CISA KEV, suggesting no known active exploitation at this time. However, the lack of immediate exploitation reports combined with the severity of the functionality (arbitrary code execution via unauthenticated log messages) warrants urgent remediation. An attacker could gain full control of the device by sending specially crafted log messages; no special network exposure is required beyond reaching the log message interface.