A NULL pointer dereference vulnerability exists in the logs management functionality. An unauthenticated attacker can trigger the defect to cause a crash that brings the service down, resulting in a denial of service. The weakness is characterized by the improper handling of null references during log processing, allowing for uncontrolled termination of the service.

The Advantech ADAM-3600 product is affected. No specific version range is listed, so all versions of the ADAM-3600 that include the vulnerable logs management component require the security update released by Advantech.

The CVSS score of 8.7 indicates a high severity impact, while the EPSS score of less than 1% suggests a very low exploitation probability at the time of this analysis. The vulnerability allows unauthenticated attackers to crash the service; the likely attack vector is remote access to the logs management interface, as the vulnerability is triggered through that functionality. Although the CVE is not listed in the CISA KEV catalog, the potential for a denial of service makes it prudent to mitigate promptly.