← Database

CVE-2024-39275

HIGH CVSS: 8.0 Published: 2024-09-27 Modified: 2026-06-17

Description

Cookies of authenticated Advantech ADAM-5630 users remain as active valid cookies when a session is closed. Forging requests with a legitimate cookie, even if the session was terminated, allows an unauthorized attacker to act with the same level of privileges of the legitimate user.

Affected Platforms

Advantech Adam-5630 FirmwareAdvantech Adam-5630

Weakness Type

CWE-539, NVD-CWE-Other

References