CVE-2014-0767: Advantech WebAccess Stack-based Buffer Overflow
An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control. This will overflow the static stack buffer. The attacker may then execute code on the target device remotely.
Other sources
Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long AccessCode argument.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Advantech WebAccessto a version that resolves this vulnerability.Fixed in 7.2
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0767?
CVE-2014-0767 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2014-0767?
To fix CVE-2014-0767, upgrade Advantech WebAccess to version 7.2 or later.
What type of vulnerability is CVE-2014-0767?
CVE-2014-0767 is a stack-based buffer overflow vulnerability.
Who is affected by CVE-2014-0767?
Users of Advantech WebAccess versions prior to 7.2, specifically 5.0 to 7.1, are affected by CVE-2014-0767.
Can CVE-2014-0767 be exploited remotely?
Yes, CVE-2014-0767 can be exploited remotely by attackers through the AccessCode argument.