Session Replay Attack Can Bypass Privilege Token Validation in Advantech ADAM-5630

CVE-2024-39275

Summary

The vulnerability in Advantech's ADAM-5630 device stems from improper session management, where cookies of authenticated users remain valid even after the session has been closed. This flaw allows an attacker to forge requests using a legitimate cookie, enabling them to execute actions with the same privileges as the authenticated user. The security risk is particularly concerning as it undermines user privacy and data integrity, highlighting the need for immediate remediation.

References