CVE-2014-0768

Опубликовано: 12 апр. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

An attacker may pass an overly long value from the AccessCode2 argument to the control to overflow the static stack buffer. The attacker may then remotely execute arbitrary code.

Ссылки

http://webaccess.advantech.com/
http://www.securityfocus.com/bid/66740
https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03
http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/66732

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:advantech:advantech_webaccess:*:*:*:*:*:*:*:*

Версия до 7.1 (включая)

cpe:2.3:a:advantech:advantech_webaccess:5.0:*:*:*:*:*:*:*

cpe:2.3:a:advantech:advantech_webaccess:6.0:*:*:*:*:*:*:*

cpe:2.3:a:advantech:advantech_webaccess:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.0118

Низкий

7.5 High

CVSS2

7.5 High

CVSS2

Дефекты

CWE-121

CWE-119

Связанные уязвимости

GHSA-fcm7-r499-j5pw

github

больше 3 лет назад

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long AccessCode2 argument.

EPSS

Процентиль: 78%

0.0118

Низкий

7.5 High

CVSS2

7.5 High

CVSS2

Дефекты

CWE-121

CWE-119