CVE-2016-0857

CRITICAL

Advantech WebAccess < 8.0 - Remote Code Execution via Heap-Based Buffer Overflow

Title source: llm
STIX 2.1

Description

Multiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors.

References (4)

Core 4
Core References
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-16-121
Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-16-107
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-16-119

Scores

CVSS v3 9.8
EPSS 0.0341
EPSS Percentile 87.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (1)
advantech/webaccess < 8.0
Published Jan 15, 2016
Tracked Since Feb 18, 2026