CVE-2026-43849: Vulnerability in Advantech ADAM-3600

This vulnerability involves a heap memory read flaw in the Advantech ADAM-3600 product. An attacker exploiting this vulnerability could read sensitive data from memory, potentially leading to data exfiltration. The CVSS 4.0 vector indicates the attack can be performed remotely with low complexity and no privileges or user interaction required. The vulnerability does not affect confidentiality, integrity, or availability beyond the limited data confidentiality impact described.

The primary impact is the potential unauthorized disclosure of sensitive data due to heap memory read access. There is no indication of privilege escalation, denial of service, or integrity compromise. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or workaround information is provided, users should monitor official Advantech advisories for updates and apply any future fixes promptly.