VULNERABILITY INTELLIGENCE
CVE-2024-39364
CVSS score6.3 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2024-09-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Description
Advantech ADAM-5630 has built-in commands that can be executed without authenticating the user. These commands allow for restarting the operating system, rebooting the hardware, and stopping the execution. The commands can be sent to a simple HTTP request and are executed by the device automatically, without discrimination of origin or level of privileges of the user sending the commands.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-306