Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2014-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SCADA_ADVANTECH_BWOCXRUN1.NBIN
HistoryApr 14, 2014 - 12:00 a.m.

Advantech WebAccess Multiple BWOCXRUN.OCX ActiveX Vulnerabilities

2014-04-1400:00:00
This script is Copyright (C) 2014-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
15

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.136 Low

EPSS

Percentile

95.6%

JSON

The remote host has an ActiveX control (BWOCXRUN.OCX) installed that is affected by multiple vulnerabilities :

  • Multiple methods all allow remote attackers to read arbitrary files. (CVE-2014-0771, CVE-2014-0772)

  • The CreateProcess method allows certain executable names to be run from arbitrary path names. (CVE-2014-0773)

Binary data scada_advantech_bwocxrun1.nbin
VendorProductVersionCPE
advantechwebaccesscpe:/a:advantech:webaccess
broadwinwebaccesscpe:/a:broadwin:webaccess

Related

prion 3
cvelist 3
seebug 3
cve 3
zdi 3
nvd 3
checkpoint_advisories 1
openvas 1
nessus 2
ics 1
prion
prion
Buffer overflow
2014-04-12 04:37:00
Design/Logic Flaw
2014-04-12 04:37:00
Buffer overflow
2014-04-12 04:37:00
cvelist
cvelist
CVE-2014-0771
2014-04-12 01:00:00
CVE-2014-0773
2014-04-12 01:00:00
CVE-2014-0772
2014-04-12 01:00:00
seebug
seebug
Advantech WebAccess bwocxrun.ocx任意文件访问漏洞
2014-04-15 00:00:00
Advantech WebAccess bwocxrun.ocx CreateProcess方法远程命令执行漏洞
2014-04-15 00:00:00
Advantech WebAccess bwocxrun.ocx OpenUrlToBufferTimeout方法任意文件访问漏洞
2014-04-15 00:00:00
cve
cve
CVE-2014-0771
2014-04-12 04:37:31
CVE-2014-0773
2014-04-12 04:37:31
CVE-2014-0772
2014-04-12 04:37:31
zdi
zdi
Advantech WebAccess bwocxrun.ocx OpenUrlToBuffer Information Disclosure Vulnerability
2014-05-19 00:00:00
Advantech WebAccess bwocxrun.ocx CreateProcess Remote Code Execution Vulnerability
2014-05-19 00:00:00
Advantech WebAccess bwocxrun.ocx OpenUrlToBufferTimeout Information Disclosure Vulnerability
2014-05-19 00:00:00
nvd
nvd
CVE-2014-0771
2014-04-12 04:37:31
CVE-2014-0773
2014-04-12 04:37:31
CVE-2014-0772
2014-04-12 04:37:31
checkpoint_advisories
checkpoint_advisories
Advantech WebAccess SCADA bwocxrun.ocx Command Execution (CVE-2014-0773)
2014-05-14 00:00:00
openvas
openvas
Advantech WebAccess Multiple Vulnerabilities
2014-04-16 00:00:00
nessus
nessus
Advantech WebAccess < 7.2-2013.11.14 Multiple Vulnerabilities
2017-02-14 00:00:00
Advantech WebAccess < 7.2-2013.11.14 Multiple Vulnerabilities
2015-08-17 00:00:00
ics
ics
Advantech WebAccess Vulnerabilities
2018-09-06 12:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.136 Low

EPSS

Percentile

95.6%

JSON
Related for SCADA_ADVANTECH_BWOCXRUN1.NBIN
prion3cvelist3seebug3cve3zdi3nvd3checkpoint_advisories1openvas1nessus2ics1