Buffer overflow in Advantech Webaccess
CVE-2014-0765
To exploit this vulnerability, the attacker sends data from the GotoCmd argument to control. If the value of the argument is overly long, the static stack buffer can be overflowed. This will allow the attacker to execute arbitrary code remotely.
Vulnerability class: Buffer Overflow
EPSS: 0.027 (84.2th percentile) — read the EPSS interpretation.
Affected products
- Advantech Advantech_webaccess — versions 5.0, 6.0, 7.0
- Advantech Webaccess — versions 7.2, 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov (vdb-entry, x_refsource_BID)
- ics-cert@hq.dhs.gov
- af854a3a-2127-422b-91ae-364da2661108 (Third Party Advisory, US Government Resource)
- af854a3a-2127-422b-91ae-364da2661108
Frequently asked questions
- What is CVE-2014-0765?
- CVE-2014-0765 is a vulnerability in Advantech Webaccess, classified under Stack-based Buffer Overflow. Published 2014-04-12.
- Is CVE-2014-0765 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.