CVE-2026-43847: Vulnerability in Advantech ADAM-3600

This vulnerability in the Advantech ADAM-3600 affects the proprietary protocol used for administrator authentication. An attacker can perform unrestricted brute force attempts against the administrator password despite the presence of the SafeEnhancement feature, which is intended to enhance security. The CVSS 4.0 base score is 8.2, indicating high severity, with network attack vector, high attack complexity, and no privileges or user interaction required. The vulnerability does not involve confidentiality, integrity, or availability impacts beyond the authentication bypass.

Successful exploitation allows an unauthenticated attacker to brute force the administrator password without restriction, potentially gaining administrative access to the device. This could lead to unauthorized control or configuration changes on the ADAM-3600 device. No known exploits are reported in the wild at this time.

No patch or official fix information is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, consider restricting network access to the device and monitoring for unauthorized access attempts.