ADAM-3600 vulnerabilities

CVEs whose affected-version data names the ADAM-3600 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

ADAM-3600 vulnerabilities

A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.

A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.

A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.

A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.

A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.

A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.

A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.

A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.

An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.

A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.

A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.

A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.

A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.

A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.

A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.

A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.

A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.

A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.

A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.

A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.

A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled.

A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution.

A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled.

A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution.

A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands.