The CVE describes a stack-based buffer overflow in the upload functionality of Advantech ADAM‑3600. An authenticated attacker who can submit files may overflow a stack buffer and arbitrarily execute code, potentially compromising the device. The flaw is a classic stack overflow (CWE‑121) and can lead to full code execution on the system.

The vulnerability affects all current releases of Advantech ADAM‑3600 prior to the latest security update. Exact affected sub‑versions are not enumerated in the advisory, so administrators should treat any installation of ADAM‑3600 that has not been patched as vulnerable.

The CVSS score of 7.5 indicates a high severity with full integrity impact. The EPSS score of less than 1% suggests that exploitation is unlikely at present, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is likely through the web‑enabled upload interface and requires authentication, so only users with valid credentials can trigger the overflow. Once exploited, the attacker can run arbitrary code on the device.