60 matches found
CVE-2011-4524: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via a long string value in unspecified parameters...
CVE-2012-0238: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in opcImg.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via unspecified vectors...
PT-2012-1901
Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess versions prior to 7.0 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the bwview.asp...
PT-2012-2429
Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess versions prior to 7.0 Description The issue is a stack-based buffer overflow in the opcImg.asp file, which allows remote attackers to execute arbitrary code. The exact vectors used for the attack are not specified...
CVE-2012-0241: Improper Restriction of Operations within the Bounds of a Memory Buffer
Advantech/BroadWin WebAccess before 7.0 allows remote attackers to cause a denial of service memory corruption via a modified stream identifier to a function...
CVE-2011-4522: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in bwerrdn.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...
PT-2012-2426
Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess versions prior to 7.0 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For versions prior to 7.0, update to...
PT-2012-2433
Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess versions prior to 7.0 Description The issue allows remote attackers to execute arbitrary code via format string specifiers in a message string. Recommendations For versions prior to 7.0, update to version 7.0 or...
CVE-2012-0242: Use of Externally-Controlled Format String
Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via format string specifiers in a message string...
CVE-2012-0233: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitrary web script or HTML via a malformed URL...
CVE-2012-0236: Exposure of Sensitive Information to an Unauthorized Actor
Advantech/BroadWin WebAccess 7.0 and earlier allows remote attackers to obtain sensitive information via a direct request to a URL. NOTE: the vendor reportedly "does not consider it to be a security risk."...
CVE-2012-0240: Improper Authentication
GbScriptAddUp.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2012-0237: Improper Restriction of Operations within the Bounds of a Memory Buffer
Advantech/BroadWin WebAccess before 7.0 allows remote attackers to 1 enable date and time syncing or 2 disable date and time syncing via a crafted URL...
PT-2012-2425
Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess versions prior to 7.0 Description The issue allows remote attackers to execute arbitrary SQL commands via a malformed URL, potentially leading to unauthorized data access or modification. Recommendations For versio...
PT-2012-1903
Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess versions prior to 7.0 Description The issue allows remote attackers to trigger the extraction of arbitrary web content into a batch file on a client system and execute this batch file. Recommendations For versions...
PT-2012-1902
Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess versions prior to 7.0 Description The issue allows remote attackers to execute arbitrary code via a long string value in unspecified parameters. Recommendations For versions prior to 7.0, update to version 7.0 or...
CVE-2012-0243: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in an ActiveX control in bwocxrun.ocx in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code by leveraging the ability to write arbitrary content to any pathname...
PT-2012-1791
Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess version affected versions not specified Description The issue allows remote attackers to execute arbitrary code or obtain a security-code value via a long string in an RPC request to TCP port 4592, specifically...
CVE-2011-4041: Improper Control of Generation of Code
webvrpcs.exe in Advantech/BroadWin WebAccess allows remote attackers to execute arbitrary code or obtain a security-code value via a long string in an RPC request to TCP port 4592...
