A vulnerability in Advantech ADAM-3600 allows an authenticated attacker to write files to arbitrary locations on the device. This flaw can lead to modification of critical configuration files, persistence mechanisms, or the insertion of malicious code, compromising the confidentiality, integrity, and availability of the system.

The impacted product is Advantech ADAM-3600. Specific version details are not provided; users of any installed instance should consult the vendor advisory for guidance.

The CVSS score is 8.2, indicating a high severity level. The EPSS score is below 1%, suggesting that exploit attempts are currently rare. The vulnerability is not listed in CISA's KEV catalog. An attacker must be authenticated, implying that compromised credentials or local console access is required. Once authenticated, the attacker can overwrite or create files at any path within the device’s filesystem, potentially enabling further exploitation or privilege escalation.