CVE-2014-0765CWE-121
Advantech WebAccess Stack-based Buffer Overflow
High · published April 12, 2014
What it is
To exploit this vulnerability, the attacker sends data from the GotoCmd
argument to control. If the value of the argument is overly long, the
static stack buffer can be overflowed. This will allow the attacker to
execute arbitrary code remotely.
The record
Technical detail
- CVSS v2.0
- 7.5 · HIGH
- Vector
- AV:N/AC:L/Au:N/C:P/I:P/A:P
- CVSS v4.0
- Not supplied
- EPSS
- 0.02672 · 85.6th percentile
- Weakness
- CWE-121 · Stack-based Buffer Overflow
- Published
- 2014-04-12T01:00Z
EPSS history
Timeline