Description
A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.
Published: 2026-10-20
Score: 8.2 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service via assertion fault
Action: Immediate Patch
AI Analysis

Impact

A crafted message can trigger an assertion fault in the Advantech ADAM‑3600 product, causing the service to crash and rendering the device unavailable to legitimate users. The vulnerability represents a failure to validate input before making internal assertions, resulting in a denial‑of‑service weakness that can be exploited remotely with minimal effort.

Affected Systems

The vulnerability affects Advantech ADAM‑3600 devices running firmware versions prior to the latest security update. affected models that have not applied the updated firmware are at risk.

Risk and Exploitability

The CVSS score of 8.2 indicates a high‑severity impact, but the EPSS score of less than 1% suggests a low probability of real‑world exploitation at this time. The likely attack vector is inferred to be remote network interaction. The vulnerability is not currently listed in CISA’s KEV catalog.

Generated by OpenCVE AI on October 20, 2026 at 21:49 UTC.

Remediation

Vendor Solution

Advantech has released a security update to address these vulnerabilities. Users and administrators of affected product versions are advised to update to the latest version immediately.


OpenCVE Recommended Actions

  • Apply the latest Advantech ADAM‑3600 firmware update immediately.
  • If updating is not yet possible, isolate the device from external network traffic or block the specific service that receives crafted messages.
  • Monitor device logs for assertion fault events and reboot the device if it crashes to restore availability.

Generated by OpenCVE AI on October 20, 2026 at 21:49 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 20 Oct 2026 22:15:00 +0000

Type Values Removed Values Added
Title Assertion Fault Crash Causing Denial of Service in Advantech ADAM-3600 Firmware

Tue, 20 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
Title Assertion Fault Crash via Crafted Message on Advantech ADAM‑3600
Weaknesses CWE-20
CWE-703

Tue, 20 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-617
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 20 Oct 2026 16:45:00 +0000

Type Values Removed Values Added
Title Assertion Fault Crash via Crafted Message on Advantech ADAM‑3600
Weaknesses CWE-20
CWE-703

Tue, 20 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
First Time appeared Advantech
Advantech adam-3600
Vendors & Products Advantech
Advantech adam-3600

Tue, 20 Oct 2026 12:45:00 +0000

Type Values Removed Values Added
Description A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.
References
Metrics cvssV4_0

{'score': 8.2, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}


Subscriptions

Advantech Adam-3600
cve-icon MITRE

Status: PUBLISHED

Assigner: CSA

Published:

Updated: 2026-10-20T16:00:38.685Z

Reserved: 2026-05-04T03:13:57.970Z

Link: CVE-2026-43853

cve-icon Vulnrichment

Updated: 2026-10-20T15:59:43.011Z

cve-icon NVD

Status : Deferred

Published: 2026-10-20T10:17:06.283

Modified: 2026-10-20T19:30:59.910

Link: CVE-2026-43853

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-20T22:00:16Z

Weaknesses