Advantech ADAM-3600

CVE-2022-22987

9.8CRITICAL

Key Information

Vendor
Advantech
Status
Adam-3600
Vendor
CVE Published:
4 February 2022

Summary

The affected product has a hardcoded private key available inside the project folder, which may allow an attacker to achieve Web Server login and perform further actions.

Affected Version(s)

ADAM-3600 <= 2.6.2

Refferences

https://www.cisa.gov/uscert/ics/advisories/icsa-22-032-02
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database

Credit

Aagam Shah (neutrinoguy) reported this vulnerability to CISA.
.