Advantech ADAM-3600 prior 2.8.5.0 buffer overflow

Summaryinfo

A vulnerability categorized as very critical has been discovered in Advantech ADAM-3600. This affects an unknown function. Such manipulation leads to buffer overflow. This vulnerability is listed as CVE-2026-43858. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in Advantech ADAM-3600. It has been rated as very critical. Affected by this issue is an unknown functionality. The manipulation with an unknown input leads to a buffer overflow vulnerability. Using CWE to declare the problem leads to CWE-120. The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. Impacted is confidentiality, integrity, and availability. CVE summarizes:

A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.

The advisory is available at csa.gov.sg. This vulnerability is handled as CVE-2026-43858 since 05/04/2026. The exploitation is known to be easy. The attack may be launched remotely. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 10/20/2026).

Upgrading to version 2.8.5.0 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• Advantech

Name

• ADAM-3600

License

• commercial

Website

• Vendor: https://www.advantech.com/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion