1. Home
  2. CVE Database
  3. CVE-2024-38308
HIGH · 8.8

CVE-2024-38308

Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are displayed to the user. The device doesn't correctly neutralize malicious code when parsing HTTP ...

Vulnerability Description

Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are displayed to the user. The device doesn't correctly neutralize malicious code when parsing HTTP requests to generate page output.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AdvantechAdam 5550-Firmware-
AdvantechAdam-5550-

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2024-38308?

CVE-2024-38308 is a vulnerability with a CVSS score of 8.8 (HIGH). Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are displayed to the user. The device doesn't correctly neutralize malicious code when parsing HTTP ...

How severe is CVE-2024-38308?

CVE-2024-38308 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-38308?

Check the references section above for vendor advisories and patch information. Affected products include: Advantech Adam 5550-Firmware, Advantech Adam-5550.