Description (CNA)
An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control. This will overflow the static stack buffer. The attacker may then execute code on the target device remotely.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Advantech / WebAccess | affected 0 through 7.1; unaffected 7.2 |
CWE
CWE-121
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03
- http://www.securityfocus.com/bid/66740
- http://webaccess.advantech.com/
ADP enrichment
No English description supplied.