CVE-2024-28948: Advantech ADAM-5630 Cross-Site Request Forgery
Published Sep 27, 2024
·Updated
Advantech ADAM-5630 contains a cross-site request forgery (CSRF) vulnerability. It allows an attacker to partly circumvent the same origin policy, which is designed to prevent different websites from interfering with each other.
Affected Software
2 affected components
All of the following
Advantech Adam-5630 Firmware<2.5.2
Advantech ADAM-5630
Remediation
Information
Advantech recommends users upgrade their ADAM-5630 devices to version 2.5.2 https://www.advantech.com/zh-tw/support/details/firmware .
Event History
Sep 27, 2024
CVE Published
via MITRE·05:41 PM
Data Sourced
via MITRE·05:41 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-28948?
CVE-2024-28948 is classified as a medium severity vulnerability due to its ability to exploit the CSRF weakness.
2
How do I fix CVE-2024-28948?
To fix CVE-2024-28948, update the Advantech ADAM-5630 firmware to version 2.5.2 or later.
3
What type of vulnerability is CVE-2024-28948?
CVE-2024-28948 is a cross-site request forgery (CSRF) vulnerability.
4
What potential impact does CVE-2024-28948 have on my system?
CVE-2024-28948 may allow attackers to bypass the same origin policy, leading to unauthorized actions on behalf of users.
5
Which devices are affected by CVE-2024-28948?
CVE-2024-28948 affects Advantech ADAM-5630 devices running firmware versions earlier than 2.5.2.