CVE-2014-2368

The CVE-2014-2368 issue affects Advantech WebAccess (prior to 7.2) via the bwocxrun ActiveX control. The BrowseFolder method can be abused to read arbitrary files, enabling remote read access. Root cause: Unsafe ActiveX control that allows navigation from the Internet to local files. Exploitation...

Advantech WebAccess < 7.2-2014.06.06 Multiple Vulnerabilities

Binary data scadaadvantechwebaccess72.nbin...