CVE-2026-43847: ADAM-3600 prior to version 2.8.5.0

Affected technology

ADAM-3600 · prior to version 2.8.5.0
Advantech

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An attacker could brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled. Source advisory’s CVSS 4.0 assessment (base score 8.2/10) rates confidentiality impact as high; integrity and availability impact as none.