Description
A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.
Published: 2026-10-20
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Immediate Patch
AI Analysis

Impact

A vulnerability in the bulk port configuration functionality of the Advantech ADAM‑3600 allows an unauthenticated attacker to crash the service, leading to a denial of service that disrupts device availability.

Affected Systems

All variants of the Advantech ADAM‑3600 product family are affected. No specific firmware revisions are listed in the advisory, so administrators should treat the vulnerability as present across current and legacy releases until a vendor patch is applied.

Risk and Exploitability

Our data shows a CVSS score of 6.9, indicating moderate severity, and an EPSS score of less than 1%, implying a low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is network‑based, as the bulk port configuration endpoint is usually accessible over the network, but the CVE description does not explicitly state the vector.

Generated by OpenCVE AI on October 20, 2026 at 21:50 UTC.

Remediation

Vendor Solution

Advantech has released a security update to address these vulnerabilities. Users and administrators of affected product versions are advised to update to the latest version immediately.

OpenCVE Recommended Actions

  • Apply the Advantech security update for the ADAM‑3600 as soon as it is available
  • Restrict access to the bulk port configuration service by using firewall rules or network segmentation so that only trusted management hosts can reach it
  • Monitor device logs for service crashes and schedule routine restarts if repeated failures occur

Generated by OpenCVE AI on October 20, 2026 at 21:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 20 Oct 2026 22:15:00 +0000

Type Values Removed Values Added
Title Bulk Port Configuration Vulnerability Causes Service Crash on Advantech ADAM‑3600

Tue, 20 Oct 2026 19:45:00 +0000

Type Values Removed Values Added
Title Denial of Service via Bulk Port Configuration in Advantech ADAM-3600
Weaknesses CWE-20

Tue, 20 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 20 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Title Denial of Service via Bulk Port Configuration in Advantech ADAM-3600
Weaknesses CWE-20

Tue, 20 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
First Time appeared Advantech
Advantech adam-3600
Vendors & Products Advantech
Advantech adam-3600

Tue, 20 Oct 2026 12:45:00 +0000

Type Values Removed Values Added
Description A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.
References
Metrics cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N'}

Subscriptions

Advantech Adam-3600
cve-icon MITRE

Status: PUBLISHED

Assigner: CSA

Published:

Updated: 2026-10-20T16:03:39.643Z

Reserved: 2026-05-04T03:13:39.245Z

Link: CVE-2026-43848

cve-icon Vulnrichment

Updated: 2026-10-20T16:03:35.485Z

cve-icon NVD

Status : Deferred

Published: 2026-10-20T09:17:11.223

Modified: 2026-10-20T19:30:59.910

Link: CVE-2026-43848

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-20T22:00:16Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption