Advantech WebAccess 7.2 < 7.2-2014.07.30 Multiple ActiveX RCE

Binary data 9959.prm...

Advantech WebAccess 7.2 < 7.2-2014.07.30 Multiple ActiveX RCE

Binary data scadaadvantechwebaccess7220140730.nbin...

CVE-2014-0985

Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the NodeName parameter...

CVE-2014-0985

Advantech WebAccess 7.2 contains multiple stack-based buffer overflow vulnerabilities (CVE-2014-0985 through CVE-2014-0992) in ActiveX/ parsing code (notably NodeName, GotoCmd, NodeName2, AccessCode, AccessCode2, UserName, projectname, and password parameters). According to Core Security CORE-201...