Buffer overflow in Advantech Webaccess
CVE-2014-0764
By providing an overly long string to the NodeName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then execute code on the target device remotely.
Vulnerability class: Buffer Overflow
EPSS: 0.027 (84.2th percentile) — read the EPSS interpretation.
Affected products
- Advantech Advantech_webaccess — versions 5.0, 6.0, 7.0
- Advantech Webaccess — versions 7.2, 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov (vdb-entry, x_refsource_BID)
- ics-cert@hq.dhs.gov
- af854a3a-2127-422b-91ae-364da2661108 (Third Party Advisory, US Government Resource)
- af854a3a-2127-422b-91ae-364da2661108
Frequently asked questions
- What is CVE-2014-0764?
- CVE-2014-0764 is a vulnerability in Advantech Webaccess, classified under Stack-based Buffer Overflow. Published 2014-04-12.
- Is CVE-2014-0764 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.