CVEvulnerability

CVE-2014-0764

7.5 HIGH Published 2014-04-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-04-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119, CWE-121

Description

By providing an overly long string to the NodeName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then execute code on the target device remotely.

Affected configurations

• advantech advantech webaccess (<= 7.1) • advantech advantech webaccess 5.0 • advantech advantech webaccess 6.0 • advantech advantech webaccess 7.0

Related

Weakness · CWE (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-121 Stack-based Buffer Overflow weakness

References