Lucene search

K
cvelistIcscertCVELIST:CVE-2014-0773
HistoryApr 12, 2014 - 1:00 a.m.

CVE-2014-0773

2014-04-1201:00:00
icscert
www.cve.org

6.8 Medium

AI Score

Confidence

Low

0.136 Low

EPSS

Percentile

95.6%

The CreateProcess method in the BWOCXRUN.BwocxrunCtrl.1 ActiveX control in bwocxrun.ocx in Advantech WebAccess before 7.2 allows remote attackers to execute (1) setup.exe, (2) bwvbprt.exe, and (3) bwvbprtl.exe programs from arbitrary pathnames via a crafted argument, as demonstrated by a UNC share pathname.

6.8 Medium

AI Score

Confidence

Low

0.136 Low

EPSS

Percentile

95.6%