6.4 Medium
AI Score
Confidence
Low
0.022 Low
EPSS
Percentile
89.6%
The OpenUrlToBufferTimeout method in the BWOCXRUN.BwocxrunCtrl.1 ActiveX control in bwocxrun.ocx in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a file: URL.
ics-cert.us-cert.gov/advisories/ICSA-14-079-03