PT-2024-6690 · Advantech · Adam-5630

Published 2024-06-26 · Updated 2024-10-07 · CVE-2024-34542

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Advantech ADAM-5630 (affected versions not specified)

Description: The issue is related to the transmission of user credentials in plain text between the device and the user source device during the login process. This is due to the use of weak encryption algorithms. An attacker could exploit this to reveal user credentials.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

CWE-261

Related Identifiers

BDU:2024-07898

CVE-2024-34542

Affected Products

Adam-5630

References · 11

• https://osv.dev/vulnerability/CVE-2024-34542 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-34542 · Security Note
• https://bdu.fstec.ru/vul/2024-07898 · Security Note
• https://twitter.com/VulmonFeeds/status/1839357066718118332 · Twitter Post
• https://advantech.com/ru-ru/support/details/firmware?id=1-1WFJLZ4 · Note
• https://t.me/cvenotify/97266 · Telegram Post
• https://t.me/cvenotify/96416 · Telegram Post
• https://twitter.com/CVEnew/status/1839724540425056360 · Twitter Post
• https://vuldb.com/ru/?id.278803 · Note
• https://t.me/cvedetector/6574 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-270-02 · Note