This vulnerability allows an attacker to perform unrestricted brute‑force attempts against the administrator password of the Advantech ADAM‑3600 regardless of the SafeEnhancement setting. The result is that an adversary can gain full administrative access, enabling compromise of device configuration, data, and potentially the network segment to which the device is connected.

The affected product is the Advantech ADAM‑3600. No specific firmware or software version information is listed, so all releases of ADAM‑3600 are considered vulnerable until the vendor’s update is applied.

The CVSS score of 8.2 indicates a high impact if exploited. The EPSS score of less than 1% suggests that current exploitation activity is low and the vulnerability is not known to be actively used, and it is not listed in CISA’s KEV catalog. The likely attack vector is a remote connection over the proprietary protocol exposed on the network. Based on the description, the vulnerability can be exploited by an attacker who can reach the device, enabling a brute‑force attack without any imposed rate limits.