CVE-2014-0768: An attacker may pass an overly long value from the AccessCode2 argument to the control to overflow the static stack buffer

Unscored severity · published Apr 12, 2014

CVE-2014-0768

An attacker may pass an overly long value from the AccessCode2 argument to the control to overflow the static stack buffer

–

CVSS

2.7%

EPSS

On KEV

Description

An attacker may pass an overly long value from the AccessCode2 argument to the control to overflow the static stack buffer. The attacker may then remotely execute arbitrary code.

Exploitation

Is it being used?

Exploit prediction (EPSS)2.7% · higher than 86% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Advantech Webaccess · Advantech

through 7.1; 5.0; 6.0; 7.0 · source: NVD

Affected product

Advantech Webaccess

Advantech

All Advantech Webaccess CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2014-0768

CVE.org

https://www.cve.org/CVERecord?id=CVE-2014-0768

webaccess.advantech.com

http://webaccess.advantech.com/

www.securityfocus.com

http://www.securityfocus.com/bid/66740

www.cisa.gov

https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03

Third Party Advisory

http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03

www.securityfocus.com

http://www.securityfocus.com/bid/66732