An unauthenticated attacker can trigger a stack-based buffer overflow by sending specially crafted cookies when the SafeEnhancement feature is active in Advantech ADAM‑3600 devices, allowing arbitrary code execution. This flaw arises from improper input validation in the Cookie parsing logic, a classic stack buffer overflow (CWE‑121). The vulnerability can compromise the confidentiality, integrity, and availability of the affected device, giving an attacker full control over the system without requiring any prior authentication.

The check identifies Advantech ADAM‑3600 as the affected product, but no specific firmware or software version ranges are listed. Administrators should verify whether their installations match the conditions described in the vendor’s security advisory.

The CVSS score of 9.2 indicates critical severity, and the EPSS score remains below 1 %, suggesting exploitation is currently unlikely but possible once a public exploit is crafted. The vulnerability is not listed in CISA’s KEV catalog. Attackers could exploit the flaw remotely via crafted cookie traffic when the SafeEnhancement feature is enabled, bypassing authentication controls and executing arbitrary code.