PatchTheCVECVE-2024-38308: Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are display
CVE-2024-38308 is a high-severity flaw (CVSS 8.8) affecting adam 5550-firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are displayed to the user. The device doesn't correctly neutralize malicious code when parsing HTTP requests to generate page output.
Why this priority
- High severity
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 8.8 (High) |
| Attack vector | Adjacent network |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.3% (top 76%) |
| CISA exploited list | No |
| Weakness | CWE-79 |
| Published | 2024-09-27 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-38308?
adam 5550-firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2024-38308 being exploited?
CVE-2024-38308 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-38308 affect?
CVE-2024-38308 affects adam 5550-firmware. Severity is high (CVSS 8.8). Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are displayed to the user. The device doesn't correctly neutralize malicious code when parsing HTTP requests to generate page output.
How urgent is CVE-2024-38308?
Priority 37/100. High severity