Advantech WebAccess < 7.2-2013.11.14 Multiple Vulnerabilities

Binary data scadaadvantechwebaccess7220131114.nbin...

Advantech WebAccess SCADA webvact.ocx UserName Buffer Overflow (CVE-2014-0770)

A stack buffer overflow has been reported in Advantech's WebAccess SCADA software. This is due to insufficient input validation on the UserName parameter of the webvact.ocx ActiveX control, a part of the WebAccess Client. Successful exploitation could lead to code execution in the context of the...

CVE-2014-0770 Advantech WebAccess Stack-based Buffer Overflow

By providing an overly long string to the UserName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then execute code on the target device remotely...

CVE-2014-0770

Summary of CVE-2014-0770: Advantech WebAccess (SCADA/HMI) is affected by a stack-based buffer overflow in the webvact.ocx ActiveX control, triggered by an overly long string supplied to the UserName parameter. This vulnerability could allow remote code execution on the target machine, as describe...