Live › vulnerability › CVE-2026-43847
Go to dashboardAdvantech ADAM-3600 EdgeLink RTU: the proprietary protocol has no limit on administrator password attempts, so a network attacker can brute force it, even with SafeEnhancement enabled. Fixed by a lockout after repeated failures.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Anyone running Advantech ADAM-3600 EdgeLink remote terminal units on firmware older than 2.8.5.0 where the proprietary management protocol is reachable over the network. Typical systems are industrial data acquisition and remote monitoring sites. Teams without ADAM-3600 devices, or with the protocol reachable only from a trusted admin network, can deprioritize it, though it is one of about 30 CVEs fixed in the same release.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ADAM-3600 | vendor | < 2.8.5.0 | 2.8.5.0 |
2.8.5.0 are affected2.8.5.0 or later (per CVE record; Advantech's fix adds a lockout: after 5 consecutive failed attempts, a 5-minute wait)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.
This page as .md · .json · in your agent: get_signal("CVE-2026-43847")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.