Advantech WebAccess Stack-based Buffer Overflow (CVE-2018-17910)

A stack-based buffer overflow vulnerability exists in Advantech WebAccess. Successful exploitation could lead to arbitrary code execution on the affected...

CVE-2018-17910

Advantech WebAccess is affected by CVE-2018-17910 through a stack-based buffer overflow in the WebAccess Client component. The root cause is improper validation of the length of user-supplied data, leading to a stack-based overflow in bwswfcfg.exe accessed via 0x2711 IOCTL in the webvrpcs process...

Advantech WebAccess

1. EXECUTIVE SUMMARY CVSS v3 8.4 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: WebAccess Vulnerabilities: Improper Access Control, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow for arbitrary...