Advantech ADAM 5630
view advisory published 2024-09-26
Successful exploitation of this vulnerability could allow an attacker to hijack a legitimate user's session, perform cross-site request forgery, or cause a denial-of-service condition.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-39364US | —OT elevated | — | ||
Advantech ADAM-5630
has built-in commands that can be executed without authenticating the
user. These commands allow for restarting the operating system,
rebooting the hardware,… | ||||
| CVE-2024-39275US | high8.8 | — | ||
Cookies of authenticated Advantech ADAM-5630 users remain as active valid cookies when a
session is closed. Forging requests with a legitimate cookie, even if
the session was ter… | ||||
| CVE-2024-34542US | medium5.7 | — | ||
Advantech ADAM-5630 shares user credentials plain text between the device and the user source device during the login process. | ||||
| CVE-2024-28948US | high8.8 | — | ||
Advantech ADAM-5630 contains a cross-site request forgery (CSRF) vulnerability. It allows an attacker to partly circumvent the same
origin policy, which is designed to prevent dif… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-270-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-270-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (4)
- MitigationAdvantech ADAM-5630
Advantech recommends users upgrade their ADAM-5630 devices to version 2.5.2.
https://www.advantech.com/zh-tw/support/details/firmware?id=1-1WFJLZ4 - MitigationAdvantech ADAM-5630
Advantech recommends users upgrade their ADAM-5630 devices to version 2.5.2.
https://www.advantech.com/zh-tw/support/details/firmware?id=1-1WFJLZ4 - MitigationAdvantech ADAM-5630
Advantech recommends users upgrade their ADAM-5630 devices to version 2.5.2.
https://www.advantech.com/zh-tw/support/details/firmware?id=1-1WFJLZ4 - MitigationAdvantech ADAM-5630
Advantech recommends users upgrade their ADAM-5630 devices to version 2.5.2.
https://www.advantech.com/zh-tw/support/details/firmware?id=1-1WFJLZ4
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan