An integer overflow occurs within the license manager service of the Advantech ADAM-3600. The flaw allows an unauthenticated attacker to send a crafted request that causes the service to crash, resulting in a denial of service against the device's administrative functionality. The impact is limited to service availability; there is no remote code execution or data disclosure as described.

The vulnerability applies to Advantech's ADAM-3600 series. No specific firmware or software version numbers are listed in the CNA data, so all current and prior releases are potentially affected until patched.

The CVSS score of 6.9 places this issue in the medium severity range. The EPSS score of less than 1 % indicates a low likelihood of exploitation at this time, and the vulnerability is not listed in CISA KEV. Based on the description, the attack vector is inferred to be network‑based, where an external user can send a malformed license request to the service. The exploit requires no privileged access, but it requires the ability to reach the license manager over the network or local interface.