Advantech EKI-1200 Buffer Overflow

OVERVIEW Enrique Nissim and Pablo Lorenzzato from Core Security Engineering Team have identified a buffer overflow vulnerability in Advantech EKI-1200 product line. Advantech has produced a patch that mitigates this vulnerability. CORE Security has tested the patch to validate that it resolves th...

CVE-2014-8385

CVE-2014-8385 is a buffer overflow vulnerability in Advantech EKI-1200 series gateways (firmware prior to 1.63). The issue (CWE-122) can allow remote attackers to execute arbitrary code, as described in the ICS-CERT advisory. A patch has been released by Advantech to mitigate the vulnerability (f...