Description (CNA)
An attacker may pass an overly long value from the AccessCode2 argument to the control to overflow the static stack buffer. The attacker may then remotely execute arbitrary code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Advantech / WebAccess | affected 0 through 7.1; unaffected 7.2 |
CWE
CWE-121
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03
- http://www.securityfocus.com/bid/66740
- http://webaccess.advantech.com/
ADP enrichment
No English description supplied.