CVE-2014-0764: Advantech WebAccess Stack-based Buffer Overflow
By providing an overly long string to the NodeName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then execute code on the target device remotely.
Other sources
Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long NodeName parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.2
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0764?
CVE-2014-0764 is considered a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2014-0764?
To mitigate CVE-2014-0764, upgrade Advantech WebAccess to version 7.2 or later.
Who is affected by CVE-2014-0764?
CVE-2014-0764 affects Advantech WebAccess versions 5.0, 6.0, 7.0, and all versions prior to 7.2.
What type of vulnerability is CVE-2014-0764?
CVE-2014-0764 is a stack-based buffer overflow vulnerability.
Can CVE-2014-0764 be exploited remotely?
Yes, CVE-2014-0764 can be exploited remotely by attackers using a long NodeName parameter.