CVE-2024-39364 — Advantech ADAM-5630 Missing Authentication for Critical Function

CVE-2024-39364

Advantech ADAM-5630 Missing Authentication for Critical Function PUBLISHED

Description (CNA)

Advantech ADAM-5630 has built-in commands that can be executed without authenticating the user. These commands allow for restarting the operating system, rebooting the hardware, and stopping the execution. The commands can be sent to a simple HTTP request and are executed by the device automatically, without discrimination of origin or level of privileges of the user sending the commands.

Affected (CNA)

Vendor / product	Versions
Advantech / ADAM-5630	affected 0 before v2.5.2

CWE

CWE-306

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-02

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.