Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h9cj-757c-fm2v

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to the heap-based buffer, which could allow an attacker to execute arbitrary code under the context of the process.

A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to the heap-based buffer, which could allow an attacker to execute arbitrary code under the context of the process.

EPSS

Процентиль: 74%
0.00822
Низкий

8.8 High

CVSS3

Дефекты

CWE-119
CWE-122

Связанные уязвимости

CVSS3: 8.8
nvd
больше 8 лет назад

A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to the heap-based buffer, which could allow an attacker to execute arbitrary code under the context of the process.

EPSS

Процентиль: 74%
0.00822
Низкий

8.8 High

CVSS3

Дефекты

CWE-119
CWE-122