Advantech ADAM-3600 EdgeLink: Path traversal allows arbitrary file read
Summary
Advantech ADAM-3600 EdgeLink remote terminal units contain a path traversal vulnerability (CWE-22). An attacker with valid high-privilege credentials can read arbitrary files on the system, which may expose configuration data or credentials. According to the CVSS vector only confidentiality is affected, and the flaw is one of 30 CVEs in the same Advantech advisory.
Affected
- ADAM-3600 (EdgeLink) prior to version 2.8.5.0 according to the CNA record
- The default configuration is listed as unaffected by the CNA
Fixed in
- Advantech has released a security update (advisory ACIRT-261001).
- The fixed build is not confirmed: the advisory refers to v2.8.5.0, while some information refers to 2.8.5.1. Ask Advantech which build contains the fix.
Workaround
Unknown. No vendor-documented workaround was found; the vendor recommends updating.
Exploitation
- No known exploitation at the time of the sources.
- CISA SSVC: exploitation none, not automatable.
- Not listed in KEV according to OpenCVE; no public proof of concept was found in the sources.
Our recommendation
- Inventory all ADAM-3600 units and check whether they are reachable from the internet or from IT networks.
- Before rollout, ask Advantech which firmware contains the fix, then update affected devices.
- Restrict administrative access, rotate credentials and separate RTUs from IT networks until patched.
- Patch CVE-2026-43850 from the same advisory at the same time.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Advantech Security Advisories www.advantech.com
- CSA Singapore alert AL-2026-149 www.csa.gov.sg
- Advantech ADAM-3600 security advisory PDF advcloudfiles.advantech.com
- OpenCVE CVE-2026-43851 app.opencve.io
- VulDB 422718 vuldb.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 15:35.
Original description (NVD)
A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.