CVE-2014-0765

Опубликовано: 12 апр. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

To exploit this vulnerability, the attacker sends data from the GotoCmd argument to control. If the value of the argument is overly long, the static stack buffer can be overflowed. This will allow the attacker to execute arbitrary code remotely.

Ссылки

http://webaccess.advantech.com/
http://www.securityfocus.com/bid/66740
https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03
http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/66722

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:advantech:advantech_webaccess:*:*:*:*:*:*:*:*

Версия до 7.1 (включая)

cpe:2.3:a:advantech:advantech_webaccess:5.0:*:*:*:*:*:*:*

cpe:2.3:a:advantech:advantech_webaccess:6.0:*:*:*:*:*:*:*

cpe:2.3:a:advantech:advantech_webaccess:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.0118

Низкий

7.5 High

CVSS2

7.5 High

CVSS2

Дефекты

CWE-121

CWE-119

Связанные уязвимости

GHSA-rj4r-c32h-gm33

github

больше 3 лет назад

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long GotoCmd argument.

EPSS

Процентиль: 78%

0.0118

Низкий

7.5 High

CVSS2

7.5 High

CVSS2

Дефекты

CWE-121

CWE-119