A stack-based buffer overflow exists in the logs settings functionality of the Advantech ADAM‑3600, allowing an attacker who has authenticated access to execute arbitrary code on the device. The flaw is classified as CWE‑121, a stack overrun that can lead to full system compromise if the attacker can supply a crafted payload. The impact is the potential for remote code execution on the device, which could be leveraged to move laterally, alter data, or disrupt services.

The affected product is the Advantech ADAM‑3600. No specific firmware or software version ranges are listed in the available data, so all deployed devices of this model should be considered potentially vulnerable until a patch is applied.

The CVSS score of 7.5 indicates a high severity, yet the EPSS score is listed as <1 % and the vulnerability is not listed in the CISA KEV catalog, suggesting a low likelihood of widespread exploitation. Successful exploitation requires the attacker to be authenticated and possess privileges sufficient to modify log settings, so the risk can be mitigated by restricting privileged access and applying the vendor’s security update.