CVE-2014-0766

Advantech WebAccess < 7.1 - Remote Code Execution via NodeName2 Buffer Overflow

Title source: llm
STIX 2.1

Description

An attacker can exploit this vulnerability by copying an overly long NodeName2 argument into a statically sized buffer on the stack to overflow the static stack buffer. An attacker may use this vulnerability to remotely execute arbitrary code.

References (5)

Core 5
Core References
Third Party Advisory, US Government Resource
http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03
Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/66725
Third Party Advisory, US Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/66740

Scores

EPSS 0.0118
EPSS Percentile 79.0%

Details

CWE
CWE-119 CWE-121
Status published
Products (6)
advantech/advantech_webaccess 5.0
advantech/advantech_webaccess 6.0
advantech/advantech_webaccess 7.0
advantech/advantech_webaccess < 7.1
Advantech/WebAccess < 7.1
Advantech/WebAccess 7.2
Published Apr 12, 2014
Tracked Since Feb 18, 2026