CVE-2014-8388

Advantech WebAccess < 7.2 - Remote Code Execution via ip_address Parameter

Title source: llm
STIX 2.1

Description

Stack-based buffer overflow in Advantech WebAccess, formerly BroadWin WebAccess, before 8.0 allows remote attackers to execute arbitrary code via a crafted ip_address parameter in an HTML document.

References (1)

Core 1
Core References
US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-14-324-01

Scores

EPSS 0.0025
EPSS Percentile 47.9%

Details

CWE
CWE-119
Status published
Products (1)
advantech/webaccess < 7.2
Published Nov 21, 2014
Tracked Since Feb 18, 2026