The Advantech WebAccess/SCADA Network Service (webvrpcs.exe) running on the remote host is affected by a remote code execution vulnerability due to improper validation of user-supplied data prior to copying it to a fixed-length stack-based buffer when processing an IOCTL 0x138bd RPC message. An unauthenticated, remote attacker can exploit this, via a series of crafted requests, to execute arbitrary code.
Binary data scada_advantech_webaccess_cve-2018-7499.nbin