A flaw in Advantech ADAM‑3600’s proprietary protocol allows an attacker to bypass the device’s authentication mechanism. The vulnerability enables a user to gain access without valid credentials, and it is inferred that this could allow full control over the device and its data. This weakness is a classic authentication bypass flaw, where the software fails to properly verify identity before granting access.

The affected product is Advantech ADAM‑3600. No specific version details are given in the published advisory, so all current releases may be susceptible until the vendor issues a fix.

The CVSS score of 9.3 indicates a high severity with potential for remote unauthorized access. The EPSS score is less than 1 %, suggesting a low but non‑zero likelihood of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is network‑based, inferred from the protocol involved; an attacker would need to communicate with the device over its proprietary interface to exploit the authentication bypass.