Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Advantech Webaccess

🗓️ 03 Aug 2021 16:03:04Reported by zyjsuperType

gitee🔗 gitee.com👁 9 Views

PoC exploit for CVE-2016-0856 targets Windows RpcClient in bwconn.dll to run code remotely.

Reporter	Title	Published	Views	Family All 80
zdt	Advantech WebAccess < 8.1 - webvrpcs DrawSrv.dll Path BwBuildPath Stack-Based Buffer Overflow	31 Mar 201800:00	–	zdt
Gitee	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Advantech Webaccess	30 Jul 202020:16	–	gitee
Gitee	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Advantech Webaccess	5 Nov 202011:13	–	gitee
Gitee	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Advantech Webaccess	20 Jan 202109:21	–	gitee
Gitee	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Advantech Webaccess	14 Sep 202517:18	–	gitee
Tenable Nessus	Advantech WebAccess 8.x < 8.1 Multiple Vulnerabilities	11 Jan 201700:00	–	nessus
Tenable Nessus	Advantech WebAccess < 8.1-2015.12.30 Multiple Vulnerabilities	3 Mar 201600:00	–	nessus
BDU FSTEC	The vulnerabilities of the Advantech WebAccess remote monitoring software allow a intruder to execute arbitrary code.	12 Feb 201600:00	–	bdu_fstec
CNVD	Advantech WebAccess stack buffer overflow vulnerability (CNVD-2016-00434)	21 Jan 201600:00	–	cnvd
Check Point Advisories	Advantech WebAccess multiple services Buffer Overflow (CVE-2016-0856)	25 Apr 201600:00	–	checkpoint_advisories

03 Aug 2021 16:03Current

8.9High risk

Vulners AI Score8.9

CVSS 39.8

CVSS 210

EPSS0.16655

advantech webaccess windows vulnerability remote procedure call bwconn dll proof of concept remote code execution