CVEvulnerability
CVE-2014-0767
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-04-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119, CWE-121
Description
An attacker may exploit this vulnerability by passing an overly long
value from the AccessCode argument to the control. This will overflow
the static stack buffer. The attacker may then execute code on the
target device remotely.
Affected configurations
• advantech advantech webaccess (<= 7.1)
• advantech advantech webaccess 5.0
• advantech advantech webaccess 6.0
• advantech advantech webaccess 7.0
Related
References
- http://webaccess.advantech.com/ webaccess.advantech.com
- http://www.securityfocus.com/bid/66740 www.securityfocus.com
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03 www.cisa.gov
- http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/66728 www.securityfocus.com