CVE-2014-0765
To exploit this vulnerability, the attacker sends data from the GotoCmd argument to control. If the value of the argument is overly long, the static stack buffer can be overflowed. This will allow the attacker to execute arbitrary code remotely.
- Score
- CVSS 2.0 7.5 High
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2014-04-12
- Last modified
- 2025-09-19
- Weaknesses
- CWE-119, CWE-121
Affected products
References
- http://webaccess.advantech.com/
- http://www.securityfocus.com/bid/66740
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03
- http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03
- http://www.securityfocus.com/bid/66722
