Description (CNA)
By providing an overly long string to the UserName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then execute code on the target device remotely.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Advantech / WebAccess | affected 0 through 7.1; unaffected 7.2 |
CWE
CWE-121
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03
- http://www.securityfocus.com/bid/66740
- http://webaccess.advantech.com/
ADP enrichment
No English description supplied.