A stack-based buffer overflow exists in the logs settings functionality of the Advantech ADAM-3600, allowing an attacker who has authenticated access to execute arbitrary code on the device. The vulnerability is a classic stack‑based overflow (CWE-120), and exploitation could lead to full system compromise if the attacker can choose the payload.

The affected product is the Advantech ADAM-3600. No specific firmware or software version ranges are listed in the available data, so all deployed devices of this model should be considered potentially vulnerable until a patch is applied.

The CVSS score of 7.5 indicates a high severity, but the EPSS score is recorded as <1% and the vulnerability is not listed in the CISA KEV catalog, suggesting a low likelihood of widespread exploitation. A successful attack requires the victim to be authenticated and to have permission to modify log settings, so restricting privileged access and applying the vendor’s security update are advised to mitigate the risk.