CVE-2014-2368

High

Published: 19/07/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before version 7.2 allows remote attackers to read arbitrary files via a crafted call.

Risk Assessment

Attackers may gain access to sensitive data stored on the server, potentially leading to a security breach for the organization.

Recommendation

It is recommended to update Advantech WebAccess to version 7.2 or later to mitigate this vulnerability.

Other vulnerabilities in Advantech WebAccess (przed wersją 7.2)

CVE-2014-2364High
Multiple stack-based buffer overflows in Advantech WebAccess before version 7.2 allow remote attackers to execute arbitrary code via long strings in various parameters of ActiveX controls.

Original NVD description (English source)

The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS