A stack-based buffer overflow exists in a non‑functional feature of Advantech ADAM‑3600. The flaw allows an attacker who has authenticated access to the device to cause a buffer overflow on the stack, which can be manipulated to execute arbitrary code. This vulnerability aligns with the "Stack‑based Buffer Overflow" weakness (CWE‑121) and is capable of compromising the confidentiality, integrity, and availability of the affected system.

The vulnerability affects the Advantech ADAM‑3600 product series. All versions prior to the latest update released by Advantech are potentially vulnerable. The advisory specifically recommends updating to the newest firmware or software release to remediate the issue.

The CVSS score of 8.6 classifies the flaw as high severity. However, the EPSS score of less than 1 % indicates a very low likelihood of exploitation at this time, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires the attacker to have valid credentials to the device, suggesting that an authenticated, either local or remote, user initiates the buffer overflow to achieve code execution.