Lucene search
K

3 matches found

Zero Day Initiative
Zero Day Initiative
added 2016/02/05 12:0 a.m.19 views

Advantech WebAccess webvrpcs Service BwOpcSvc.dll WindowName sprintf Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable instances of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x13895 IOCTL in the BwOpcTool subsystem. A stack-based buff...

9.3CVSS3.7AI score0.51468EPSS
Exploits9References1
Zero Day Initiative
Zero Day Initiative
added 2016/02/05 12:0 a.m.22 views

Advantech WebAccess webvrpcs Service BwOpcSvc.dll sprintf Uncontrolled Format String Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable instances of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x13881 IOCTL in the BwOpcTool subsystem. An uncontrolled...

9.3CVSS3.3AI score0.00252EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/02/05 12:0 a.m.38 views

Advantech WebAccess webvrpcs Service BwOpcSvc.dll WindowName sprintf Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable instances of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x1389F IOCTL in the BwOpcTool subsystem. A stack-based buff...

9.3CVSS3.7AI score0.51468EPSS
Exploits9References1
Rows per page
Query Builder