Advantech ADAM 5630
Advisory ansehen veröffentlicht 2024-09-26
Successful exploitation of this vulnerability could allow an attacker to hijack a legitimate user's session, perform cross-site request forgery, or cause a denial-of-service condition.
01
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-39364US | —OT erhöht | — | ||
Advantech ADAM-5630
has built-in commands that can be executed without authenticating the
user. These commands allow for restarting the operating system,
rebooting the hardware,… | ||||
| CVE-2024-39275US | high8.8 | — | ||
Cookies of authenticated Advantech ADAM-5630 users remain as active valid cookies when a
session is closed. Forging requests with a legitimate cookie, even if
the session was ter… | ||||
| CVE-2024-34542US | medium5.7 | — | ||
Advantech ADAM-5630 shares user credentials plain text between the device and the user source device during the login process. | ||||
| CVE-2024-28948US | high8.8 | — | ||
Advantech ADAM-5630 contains a cross-site request forgery (CSRF) vulnerability. It allows an attacker to partly circumvent the same
origin policy, which is designed to prevent dif… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-24-270-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-270-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (4)
- MitigationAdvantech ADAM-5630
Advantech recommends users upgrade their ADAM-5630 devices to version 2.5.2.
https://www.advantech.com/zh-tw/support/details/firmware?id=1-1WFJLZ4 - MitigationAdvantech ADAM-5630
Advantech recommends users upgrade their ADAM-5630 devices to version 2.5.2.
https://www.advantech.com/zh-tw/support/details/firmware?id=1-1WFJLZ4 - MitigationAdvantech ADAM-5630
Advantech recommends users upgrade their ADAM-5630 devices to version 2.5.2.
https://www.advantech.com/zh-tw/support/details/firmware?id=1-1WFJLZ4 - MitigationAdvantech ADAM-5630
Advantech recommends users upgrade their ADAM-5630 devices to version 2.5.2.
https://www.advantech.com/zh-tw/support/details/firmware?id=1-1WFJLZ4
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan