CVE-2014-2364
Advantech WebAccess < 7.2 - Remote Code Execution via Long String in ActiveX Control Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2014-2364.
PoCs published by Metasploit, Unknown, juan vazquez, including Metasploit module exploits/windows/browser/advantech_webaccess_dvs_getcolor.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow vulnerability in Advantech WebAccess's dvs.ocx ActiveX control via the GetColor function, achieving remote code execution on vulnerable Windows systems.
Description
Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10) SetBaud, or (11) IPAddress parameter to an ActiveX control in (a) webvact.ocx, (b) dvs.ocx, or (c) webdact.ocx.
Exploits (2)
This Metasploit module exploits a buffer overflow vulnerability in Advantech WebAccess's dvs.ocx ActiveX control via the GetColor function, achieving remote code execution on vulnerable Windows systems.
This Metasploit module exploits a buffer overflow vulnerability in Advantech WebAccess's dvs.ocx ActiveX control via the GetColor function, leveraging a dangerous sprintf call with user-controlled data. It uses ROP gadgets from ijl11.dll to achieve remote code execution on vulnerable Windows systems.