Description (CNA)
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The application lacks proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could allow an attacker to execute arbitrary code under the context of the process.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Advantech WebAccess | affected Advantech WebAccess |
CWE
CWE-121
References
- https://www.exploit-db.com/exploits/43340/
- http://www.securityfocus.com/bid/101685
- https://ics-cert.us-cert.gov/advisories/ICSA-17-306-02
ADP enrichment
No English description supplied.