CVE-2024-38308 Information

Description

Advantech ADAM 5550’s web application includes a \logs\ page where all the HTTP requests received are displayed to the user. The device doesn’t correctly neutralize malicious code when parsing HTTP requests to generate page output.

Reference

https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-01