CVE-2014-0767: An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control

Unscored severity · published Apr 12, 2014

CVE-2014-0767

An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control

–

CVSS

2.7%

EPSS

On KEV

Description

An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control. This will overflow the static stack buffer. The attacker may then execute code on the target device remotely.

Exploitation

Is it being used?

Exploit prediction (EPSS)2.7% · higher than 86% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Advantech Webaccess · Advantech

through 7.1; 5.0; 6.0; 7.0 · source: NVD

Affected product

Advantech Webaccess

Advantech

All Advantech Webaccess CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2014-0767

CVE.org

https://www.cve.org/CVERecord?id=CVE-2014-0767

webaccess.advantech.com

http://webaccess.advantech.com/

www.securityfocus.com

http://www.securityfocus.com/bid/66740

www.cisa.gov

https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03

Third Party Advisory

http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03

www.securityfocus.com

http://www.securityfocus.com/bid/66728