CVE-2024-39364 — Advantech ADAM-5630 Missing Authentication for Critical Function
Advantech ADAM-5630 has built-in commands that can be executed without authenticating the user. These commands allow for restarting the operating system, rebooting the hardwa…
Published: 2024-09-27 · CVSS: 7.0 · CVSS 4.0
Advantech ADAM-5630 has built-in commands that can be executed without authenticating the user. These commands allow for restarting the operating system, rebooting the hardware, and stopping the execution. The commands can be sent to a simple HTTP request and are executed by the device automatically, without discrimination of origin or level of privileges of the user sending the commands.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7