Unscored severity · published Jul 19, 2014
CVE-2014-2365
Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors
–
CVSS
1.6%
EPSS
No
On KEV
Description
Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AW
Advantech Webaccess · Advantech
through 7.1; 5.0; 6.0; 7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2365
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2365
webaccess.advantech.com
http://webaccess.advantech.com/
www.cisa.gov
https://www.cisa.gov/news-events/ics-advisories/icsa-14-198-02
Third Party Advisory
http://ics-cert.us-cert.gov/advisories/ICSA-14-198-02
More from Advantech Webaccess
–
CVE-2014-0992
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the password parameter
–
CVE-2014-0991
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the projectname parameter
–
CVE-2014-0990
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the UserName parameter
–
CVE-2014-0989
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode2 parameter
–
CVE-2014-0988
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode parameter