CVE-2024-28948: Advantech ADAM-5630 Cross-Site Request Forgery
Advantech ADAM-5630 contains a cross-site request forgery (CSRF) vulnerability. It allows an attacker to partly circumvent the same origin policy, which is designed to prevent different websites from interfering with each other.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Advantech ADAM-5630to a version that resolves this vulnerability.Fixed in 2.5.2
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28948?
CVE-2024-28948 is classified as a medium severity vulnerability due to its ability to exploit the CSRF weakness.
How do I fix CVE-2024-28948?
To fix CVE-2024-28948, update the Advantech ADAM-5630 firmware to version 2.5.2 or later.
What type of vulnerability is CVE-2024-28948?
CVE-2024-28948 is a cross-site request forgery (CSRF) vulnerability.
What potential impact does CVE-2024-28948 have on my system?
CVE-2024-28948 may allow attackers to bypass the same origin policy, leading to unauthorized actions on behalf of users.
Which devices are affected by CVE-2024-28948?
CVE-2024-28948 affects Advantech ADAM-5630 devices running firmware versions earlier than 2.5.2.