CVE-2024-39364: Advantech ADAM-5630 Missing Authentication for Critical Function
Advantech ADAM-5630 has built-in commands that can be executed without authenticating the user. These commands allow for restarting the operating system, rebooting the hardware, and stopping the execution. The commands can be sent to a simple HTTP request and are executed by the device automatically, without discrimination of origin or level of privileges of the user sending the commands.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39364?
CVE-2024-39364 has a high severity rating due to its ability to execute built-in commands without authentication.
How do I fix CVE-2024-39364?
Fixing CVE-2024-39364 involves applying vendor-provided patches or updating the affected Advantech ADAM-5630 firmware to the latest version.
What are the potential impacts of CVE-2024-39364?
CVE-2024-39364 can allow unauthorized users to restart the operating system, reboot the hardware, or stop its execution, leading to potential operational disruptions.
What devices are affected by CVE-2024-39364?
The vulnerability CVE-2024-39364 specifically affects Advantech ADAM-5630 devices.
Is CVE-2024-39364 being actively exploited?
As of now, there is no public indication that CVE-2024-39364 is actively being exploited in the wild.