Advantech WebAccess 7.2 < 7.2-2014.07.30 Multiple ActiveX RCE

Binary data 9959.prm...

Advantech WebAccess 7.2 < 7.2-2014.07.30 Multiple ActiveX RCE

Binary data scadaadvantechwebaccess7220140730.nbin...

CVE-2014-0986

Advantech WebAccess 7.2 is affected by CVE-2014-0986 due to a stack-based buffer overflow in the GotoCmd parameter, allowing an attacker to trigger arbitrary code execution. The Core Security CORE-2014-0005 advisory confirms a family of related stack overflow vulnerabilities in WebAccess 7.2 (and...