Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-12704

Опубликовано: 30 авг. 2017
Источник: nvd
CVSS3: 8.8
CVSS2: 6.8
EPSS Низкий

Описание

A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to the heap-based buffer, which could allow an attacker to execute arbitrary code under the context of the process.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*
Версия до 8.2 (включая)

EPSS

Процентиль: 74%
0.00822
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-122
CWE-119

Связанные уязвимости

CVSS3: 8.8
github
больше 3 лет назад

A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to the heap-based buffer, which could allow an attacker to execute arbitrary code under the context of the process.

EPSS

Процентиль: 74%
0.00822
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-122
CWE-119