Lucene search

K
cveCertccCVE-2011-4526
HistoryFeb 21, 2012 - 1:31 p.m.

CVE-2011-4526

2012-02-2113:31:56
CWE-119
certcc
web.nvd.nist.gov
29
cve-2011-4526
buffer overflow
advantech
broadwin webaccess
remote code execution
activex control
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.054

Percentile

93.2%

Buffer overflow in an ActiveX control in Advantech/BroadWin WebAccess before 7.0 might allow remote attackers to execute arbitrary code via a long string value in unspecified parameters.

Affected configurations

Nvd
Node
advantechadvantech_webaccessRange6.0
OR
advantechadvantech_webaccessMatch5.0
VendorProductVersionCPE
advantechadvantech_webaccess*cpe:2.3:a:advantech:advantech_webaccess:*:*:*:*:*:*:*:*
advantechadvantech_webaccess5.0cpe:2.3:a:advantech:advantech_webaccess:5.0:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.054

Percentile

93.2%

Related for CVE-2011-4526