Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rj4r-c32h-gm33

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long GotoCmd argument.

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long GotoCmd argument.

EPSS

Процентиль: 78%
0.0118
Низкий

Дефекты

CWE-119
CWE-121

Связанные уязвимости

nvd
почти 12 лет назад

To exploit this vulnerability, the attacker sends data from the GotoCmd argument to control. If the value of the argument is overly long, the static stack buffer can be overflowed. This will allow the attacker to execute arbitrary code remotely.

EPSS

Процентиль: 78%
0.0118
Низкий

Дефекты

CWE-119
CWE-121