Brute Force Vulnerability in Proprietary Protocol of Advantech Products
CVE-2026-43847

8.2HIGH

Key Information:

Vendor

Advantech
Status
Adam-3600
Vendor
CVE Published:
20 October 2026

What is CVE-2026-43847?

A significant vulnerability has been identified in Advantech's proprietary protocol, allowing unauthorized individuals to conduct brute force attacks against administrator passwords without any limitations. This security flaw persists even when the SafeEnhancement feature, designed to bolster security, is active. Organizations utilizing affected Advantech products are urged to assess their security measures and implement appropriate mitigations to safeguard against potential breaches.

Affected Version(s)

ADAM-3600 prior to version 2.8.5.0

References

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-20...
https://www.advantech.com/en/security-advisory
vendor-advisory

CVSS V4

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Simone Bossi and Raffaele Bova at Nozomi Networks
.