A stack-based buffer overflow vulnerability in the Advantech ADAM‑3600 allows a remote authenticated attacker to execute arbitrary code with the privileges of the authenticated user. The flaw originates when the system processes input that exceeds the size of a stack buffer, resulting in memory corruption and enabling control flow hijacking.

The vulnerability affects Advantech ADAM‑3600 series devices. No specific version range is provided in the advisory, so all currently deployed hardware running the affected firmware may be susceptible until a patch is applied.

The CVSS score of 8.6 classifies this as a high‑severity flaw. The EPSS score of less than 1% suggests a low probability of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. An attacker must first authenticate remotely to the device and then trigger the buffer overflow, enabling arbitrary code execution with the credentials of the logged‑in user.