Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3fq7-vqr9-hr59

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could allow an attacker to execute arbitrary code under the context of the process.

A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could allow an attacker to execute arbitrary code under the context of the process.

EPSS

Процентиль: 80%
0.0136
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-119
CWE-121

Связанные уязвимости

CVSS3: 9.8
nvd
больше 8 лет назад

A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could allow an attacker to execute arbitrary code under the context of the process.

fstec
больше 8 лет назад

Уязвимость программного обеспечения удаленного мониторинга Advantech WebAccess, связанная с недостаточной проверкой длины данных, предоставляемых пользователем, позволяющая нарушителю получить несанкционированный доступ к устройству и выполнить произвольный код

EPSS

Процентиль: 80%
0.0136
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-119
CWE-121