A buffer overflow occurs in the password verification routine of the Advantech ADAM‑3600. The flaw can be triggered by a user authenticated as a guest, allowing the attacker to inject arbitrary code into the device’s process space. This type of vulnerability directly compromises confidentiality, integrity, and availability, giving the attacker full control over the affected system.

The vulnerability affects Advantech ADAM‑3600 devices. Specific firmware or hardware revision details are not supplied by the advisory, so all currently deployed variants should be considered potentially impacted until further version‑specific information is released.

The CVSS score of 7.5 indicates a high severity. The EPSS score is reported as less than 1 %, suggesting that exploitation is unlikely at present, and the flaw is not listed in CISA’s KEV catalog. However, the attack vector appears to be a guest‑level user with network access to the device, so remote or local attackers could attempt the compromised password verification routine. The Advantech advisory recommends upgrading to the latest firmware to eliminate this code‑execution risk.