Advantech WebAccess < 7.2-2013.11.14 Multiple Vulnerabilities

Binary data scadaadvantechwebaccess7220131114.nbin...

Advantech WebAccess SCADA webvact.ocx NodeName Buffer Overflow (CVE-2014-0764)

A stack buffer overflow has been reported in Advantech's WebAccess SCADA software. This is due to insufficient input validation on the NodeName parameter of the webvact.ocx ActiveX control, a part of the WebAccess Client. A remote, unauthenticated attacker could exploit this vulnerability by...

Advantech WebAccess NodeName参数处理栈缓冲区溢出漏洞

CVE ID:CVE-2014-0764 Advantech WebAccess HMI/SCADA是一款HMI/SCADA软件。 Advantech WebAccess处理NodeName参数时不正确过滤用户输入，允许远程攻击者利用漏洞提交特殊参数触发基于栈的缓冲区溢出，可使应用程序崩溃或执行任意代码。 0 Advantech WebAccess 7.1 Advantech WebAccess 7.2版本已修复该漏洞，建议用户下载使用： http://webaccess.advantech.com/...

CVE-2014-0764

Advantech WebAccess is affected by CVE-2014-0764 due to a stack-based buffer overflow in the NodeName parameter parsing of the webvact.ocx ActiveX control. The advisory material from Core Security (CORE-2014-0005) and related sources indicate the vulnerability could allow remote code execution wh...