CVE-2014-0772: Advantech WebAccess File and Directory Information Exposure
The BWOCXRUN.BwocxrunCtrl.1 control contains a method named OpenUrlToBufferTimeout. This method takes a URL as a parameter and returns its contents to the caller in JavaScript. The URLs are accessed in the security context of the current browser session. The control does not perform any URL validation and allows file:// URLs that access the local disk.
The method can be used to open a URL (including file URLs) and read the URLs through JavaScript. This method could also be used to reach any arbitrary URL to which the browser has access.
Other sources
The OpenUrlToBufferTimeout method in the BWOCXRUN.BwocxrunCtrl.1 ActiveX control in bwocxrun.ocx in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a file: URL.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Advantech WebAccessto a version that resolves this vulnerability.Fixed in 7.2 - Operational
Obtain and install Advantech WebAccess Version 7.2 from the Advantech WebAccess download page: the item=software download listing.
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0772?
CVE-2014-0772 is classified as a medium severity vulnerability that allows remote attackers to read arbitrary files.
How do I fix CVE-2014-0772?
To fix CVE-2014-0772, update Advantech WebAccess to version 7.2 or later.
Which versions of Advantech WebAccess are affected by CVE-2014-0772?
CVE-2014-0772 affects Advantech WebAccess versions prior to 7.2, including 5.0, 6.0, and 7.0.
What impact does CVE-2014-0772 have on system security?
CVE-2014-0772 can allow unauthorized users to access sensitive files on the system, potentially leading to data breaches.
Is there a workaround for CVE-2014-0772 if I cannot update immediately?
As a temporary workaround, consider restricting access to the affected ActiveX control until an update can be applied.