Key points
- The vulnerability affects Advantech ADAM-3600 devices running software versions earlier than 2.8.5.0.
- The National Vulnerability Database assigns the flaw a CVSS score of 9.3, classifying it as critical.
- Attackers can exploit the issue within the proprietary protocol to bypass the system's authentication mechanism.
The National Vulnerability Database has published a record for CVE-2026-43844, identifying a critical security flaw in Advantech ADAM-3600 hardware. This vulnerability allows attackers to bypass authentication controls by exploiting weaknesses in the device's proprietary communication protocol.
What happened
Security researchers and databases have identified a significant flaw in the Advantech ADAM-3600 product line. According to the NVD record, the vulnerability exists in all versions prior to 2.8.5.0. The issue resides within the proprietary protocol that the device uses for communication. An attacker interacting with this protocol can bypass the standard authentication mechanism entirely.
This means that valid credentials are not required to gain access to the system functions protected by this layer. The National Vulnerability Database rates the severity of this authentication bypass as critical, assigning it a CVSS score of 9.3. This high score reflects the critical nature of the flaw as defined by the scoring system. The flaw allows an attacker to bypass the authentication mechanism through the proprietary protocol.
Why it matters
Authentication bypass vulnerabilities pose a risk to industrial control systems and IoT devices. When an attacker can circumvent login requirements, they gain unauthorised access to device configurations and data. In the case of the Advantech ADAM-3600, this allows attackers to bypass the authentication mechanism. The critical rating from the NVD underscores the potential impact on organisational security postures. Systems running versions older than 2.8.5.0 are immediately exposed to this threat. Without a patch or mitigation, these devices remain vulnerable to exploitation by anyone with access to the proprietary protocol port.
What happens next
- Identify all Advantech ADAM-3600 units currently deployed within your network environment.
- Verify the software version running on each device to confirm if it is prior to 2.8.5.0.
- Prioritise updating affected devices to version 2.8.5.0 or later as soon as possible.
- Monitor network traffic for unusual activity related to the proprietary protocol while patches are applied.
- Review access logs on updated devices to check for signs of prior unauthorised access attempts.
Patch priority
Teams usually begin by isolating the most exposed assets from the wider network. Check whether the affected devices communicate directly with external networks or sensitive internal segments. Prioritise updating systems that handle critical operational data or control physical infrastructure. Before applying any software changes, ensure that configuration backups are created and tested for restoration. Roll out the update to a small subset of devices first to verify stability and functionality. Once confirmed safe, proceed with the broader deployment across the remaining affected inventory.
What to do and how to stay safe: Advantech
- Audit your inventory to locate all Advantech ADAM-3600 devices and check their current firmware versions.
- Restrict network access to the proprietary protocol ports used by these devices to trusted management networks only.
- Monitor firewall logs for unauthorised connection attempts to the affected devices while awaiting vendor updates.
- Ensure that once the vendor provides an update, it is tested in a non-production environment before widespread deployment.
Step-by-step guide: Patch Management: Definition, Purpose and Operational Reality
General security guidance from the AppSec Scoop newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Which Advantech product is affected by CVE-2026-43844?
The vulnerability affects the Advantech ADAM-3600 device.
What software versions are vulnerable to this authentication bypass?
All versions of the Advantech ADAM-3600 prior to version 2.8.5.0 are affected.
How severe is this vulnerability according to the NVD?
The NVD rates the vulnerability as critical with a CVSS score of 9.3.
