CVE-2014-0765: Advantech WebAccess Stack-based Buffer Overflow
Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long GotoCmd argument.
Other sources
To exploit this vulnerability, the attacker sends data from the GotoCmd argument to control. If the value of the argument is overly long, the static stack buffer can be overflowed. This will allow the attacker to execute arbitrary code remotely.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Advantech WebAccessto a version that resolves this vulnerability.Fixed in 7.2
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0765?
CVE-2014-0765 is rated as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2014-0765?
To fix CVE-2014-0765, upgrade Advantech WebAccess to version 7.2 or later.
What kind of attack can exploit CVE-2014-0765?
CVE-2014-0765 can be exploited via a stack-based buffer overflow caused by a long GotoCmd argument.
Which versions of Advantech WebAccess are affected by CVE-2014-0765?
Advantech WebAccess versions prior to 7.2 and certain versions including 5.0, 6.0, and 7.0 are affected by CVE-2014-0765.
What impact does CVE-2014-0765 have on systems?
CVE-2014-0765 allows remote attackers to execute arbitrary code on vulnerable systems, potentially leading to total system compromise.