The vulnerability is a heap-based buffer overflow in Advantech ADAM‑3600, allowing an authenticated attacker to execute arbitrary code from a remote location. Successful exploitation could compromise the confidentiality, integrity and availability of the affected device, potentially enabling full system takeover.

Affected systems include Advantech ADAM‑3600. Specific versions are not enumerated in the advisory, so all releases prior to the security update should be considered vulnerable.

The CVSS score of 7.5 indicates high risk, while the EPSS score of less than 1% suggests low likelihood of exploitation in the wild, and the vulnerability is not listed in CISA’s KEV catalog. The attack vector is inferred to be remote and requires authenticated access, as stated in the description."