Live › vulnerability › CVE-2026-43845
Go to dashboardAdvantech ADAM-3600 EdgeLink (industrial remote terminal unit) firmware before 2.8.5.0 has a flaw in its password reset/recovery logic (CWE-640). A remote, unauthenticated attacker can bypass authentication by abusing it. Advantech's advisory says the password was reset to default if the program restarted after an attack-induced exception. CVSS 4.0 9.2. Reported by Nozomi Networks (Simone Bossi, Raffaele Bova). Part of a 30-CVE batch fixed together. No known exploitation.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ADAM-3600 EdgeLink | vendor | < 2.8.5.0 | 2.8.5.0 |
2.8.5.0 is affected2.8.5.0 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
This page as .md · .json · in your agent: get_signal("CVE-2026-43845")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.