CVE-2014-0767
An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control. This will overflow the static stack buffer. The attacker may then execute code on the target device remotely.
- Score
- CVSS 2.0 7.5 High
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2014-04-12
- Last modified
- 2025-09-19
- Weaknesses
- CWE-119, CWE-121
Affected products
References
- http://webaccess.advantech.com/
- http://www.securityfocus.com/bid/66740
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03
- http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03
- http://www.securityfocus.com/bid/66728
