CVE-2014-2364

High

Published: 19/07/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

Multiple stack-based buffer overflows in Advantech WebAccess before version 7.2 allow remote attackers to execute arbitrary code via long strings in various parameters of ActiveX controls.

Risk Assessment

This vulnerability poses a significant risk to organizations by allowing remote code execution, potentially leading to data loss or system takeover.

Recommendation

It is recommended to update Advantech WebAccess to version 7.2 or later to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Advantech WebAccess (przed wersją 7.2)

CVE-2014-2368High
The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before version 7.2 allows remote attackers to read arbitrary files via a crafted call.

Original NVD description (English source)

Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10) SetBaud, or (11) IPAddress parameter to an ActiveX control in (a) webvact.ocx, (b) dvs.ocx, or (c) webdact.ocx.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS