HIGH🇵🇱 Wersja polska

CVE-2014-0766

CVSS 7.5v2.0pub. 2014-04-12upd. 2026-05-06

An attacker can exploit this vulnerability by copying an overly long NodeName2 argument into a statically sized buffer on the stack to overflow the static stack buffer. An attacker may use this vulnerability to remotely execute arbitrary code.

CVSS Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Advantech Webaccess

    APP
    Advantech
    5.06.07.0≤ 7.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2014-2367HIGH7.5ten sam produkt

The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before ...

CVE-2014-2368HIGH7.5ten sam produkt

The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attack...

CVE-2014-2364HIGH7.5ten sam produkt

Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbi...

CVE-2014-2366HIGH9.0ten sam produkt

upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by r...

CVE-2014-0767HIGH7.5ten sam produkt

An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to th...