CVE-2014-2364

Опубликовано: 19 июл. 2014

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10) SetBaud, or (11) IPAddress parameter to an ActiveX control in (a) webvact.ocx, (b) dvs.ocx, or (c) webdact.ocx.

Ссылки

http://packetstormsecurity.com/files/128384/Advantech-WebAccess-dvs.ocx-GetColor-Buffer-Overflow.html
Exploit
http://webaccess.advantech.com/
http://www.securityfocus.com/bid/68714
Exploit
https://www.cisa.gov/news-events/ics-advisories/icsa-14-198-02
http://ics-cert.us-cert.gov/advisories/ICSA-14-198-02
Third Party Advisory
US Government Resource
http://packetstormsecurity.com/files/128384/Advantech-WebAccess-dvs.ocx-GetColor-Buffer-Overflow.html
Exploit
http://www.securityfocus.com/bid/68714
Exploit

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:advantech:advantech_webaccess:*:*:*:*:*:*:*:*

Версия до 7.1 (включая)

cpe:2.3:a:advantech:advantech_webaccess:5.0:*:*:*:*:*:*:*

cpe:2.3:a:advantech:advantech_webaccess:6.0:*:*:*:*:*:*:*

cpe:2.3:a:advantech:advantech_webaccess:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.40188

Средний

7.5 High

CVSS2

7.5 High

CVSS2

Дефекты

CWE-121

CWE-119

Связанные уязвимости

GHSA-wc68-m5j4-wxr7

github

больше 3 лет назад

EPSS

Процентиль: 97%

0.40188

Средний

7.5 High

CVSS2

7.5 High

CVSS2

Дефекты

CWE-121

CWE-119