CVE-2014-0767

Опубликовано: 12 апр. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control. This will overflow the static stack buffer. The attacker may then execute code on the target device remotely.

Ссылки

http://webaccess.advantech.com/
http://www.securityfocus.com/bid/66740
https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03
http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/66728

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:advantech:advantech_webaccess:*:*:*:*:*:*:*:*

Версия до 7.1 (включая)

cpe:2.3:a:advantech:advantech_webaccess:5.0:*:*:*:*:*:*:*

cpe:2.3:a:advantech:advantech_webaccess:6.0:*:*:*:*:*:*:*

cpe:2.3:a:advantech:advantech_webaccess:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.0118

Низкий

7.5 High

CVSS2

7.5 High

CVSS2

Дефекты

CWE-121

CWE-119

Связанные уязвимости

GHSA-h6fc-w6r4-3f5v

github

больше 3 лет назад

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long AccessCode argument.

EPSS

Процентиль: 78%

0.0118

Низкий

7.5 High

CVSS2

7.5 High

CVSS2

Дефекты

CWE-121

CWE-119