CVE-2014-2364
Advantech WebAccess Stack-Based Buffer Overflow
HIGH 7.5EPSS 61.4%
Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10) SetBaud, or (11) IPAddress parameter to an ActiveX control in (a) webvact.ocx, (b) dvs.ocx, or (c) webdact.ocx.
- Affected
- Advantech · WebAccess
- CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 61.38% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2014-07-19
- Updated
- 2025-10-06