This vulnerability is a stack‑based buffer overflow in the FileProcess::CheckDir function that can be triggered by supplying a file path longer than 1024 bytes. If an attacker successfully exploits the overflow, arbitrary code execution is possible. The weakness aligns with improper handling of buffer boundaries, a classic buffer overrun defect.

The vulnerability affects the Advantech ADAM‑3600 system. No specific version information is provided in the CNA data, so all deployed instances of ADAM‑3600 are potentially impacted until the vendor update is applied.

The CVSS score of 8.6 indicates high severity. The EPSS score of less than 1 % suggests that widespread exploitation is currently unlikely, and the vulnerability is not listed in the CISA KEV catalog. The attack is likely to be carried out by a remote authenticated user who can control a path string longer than 1024 bytes and has permission to invoke FileProcess::CheckDir. If successful, the attacker gains arbitrary code execution on the host. Precautions such as restricting access to the vulnerable function or enforcing strict path length validation should be considered until a patch is installed.