CVE-2020-10607: Buffer Overflow
Published Mar 27, 2020
·Updated
In Advantech WebAccess, Versions 8.4.2 and prior. A stack-based buffer overflow vulnerability caused by a lack of proper validation of the length of user-supplied data may allow remote code execution.
Affected Software
1 affected component
Advantech WebAccess<=8.4.2
Event History
Mar 27, 2020
CVE Published
via MITRE·01:27 PM
Data Sourced
via MITRE·01:27 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-10607?
CVE-2020-10607 is a stack-based buffer overflow vulnerability in Advantech WebAccess versions 8.4.2 and prior.
2
What is the severity of CVE-2020-10607?
CVE-2020-10607 has a severity rating of 8.8 (high).
3
How does CVE-2020-10607 occur?
CVE-2020-10607 is caused by a lack of proper validation of the length of user-supplied data in Advantech WebAccess.
4
How can CVE-2020-10607 be exploited?
CVE-2020-10607 can be exploited remotely to achieve remote code execution.
5
How can I fix CVE-2020-10607?
To fix CVE-2020-10607, users should update to a version of Advantech WebAccess that is later than 8.4.2.