Advantech WebAccess 7.2 < 7.2-2014.07.30 Multiple ActiveX RCE

Binary data 9959.prm...

Advantech WebAccess 7.2 < 7.2-2014.07.30 Multiple ActiveX RCE

Binary data scadaadvantechwebaccess7220140730.nbin...

CVE-2014-0989

Advantech WebAccess 7.2 contains a stack-based buffer overflow in the AccessCode2 parameter, leading to code execution. The CORE-2014-0005 advisory confirms multiple related CVEs (including CVE-2014-0989) and states the vulnerability is a client-side stack overflow; vendor issued a fix in a later...

CVE-2014-0989

Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the AccessCode2 parameter...