CVE-2024-39364CWE-306

Advantech ADAM-5630 Missing Authentication for Critical Function

High · published September 27, 2024

CVSS v4.0
7.0
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

Advantech ADAM-5630

has built-in commands that can be executed without authenticating the

user. These commands allow for restarting the operating system,

rebooting the hardware, and stopping the execution. The commands can be

sent to a simple HTTP request and are executed by the device

automatically, without discrimination of origin or level of privileges

of the user sending the commands.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
EPSS
0.00219 · 11.7th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2024-09-27T17:48Z
EPSS history
Timeline
  • 27 SEP 17:48Z
    Advantech ADAM-5630 Missing Authentication for Critical Function
    cvelistv5