CVE-2014-0764

Advantech WebAccess is affected by CVE-2014-0764 due to a stack-based buffer overflow in the NodeName parameter parsing of the webvact.ocx ActiveX control. The advisory material from Core Security (CORE-2014-0005) and related sources indicate the vulnerability could allow remote code execution wh...

CVE-2014-0765 Advantech WebAccess Stack-based Buffer Overflow

To exploit this vulnerability, the attacker sends data from the GotoCmd argument to control. If the value of the argument is overly long, the static stack buffer can be overflowed. This will allow the attacker to execute arbitrary code remotely...

CVE-2014-0767 Advantech WebAccess Stack-based Buffer Overflow

An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control. This will overflow the static stack buffer. The attacker may then execute code on the target device remotely...

CVE-2014-0768

The CVE-2014-0768 vulnerability affects Advantech WebAccess (SCADA/HMI WebAccess Client) via the webvact.ocx ActiveX control. It is caused by a stack-based buffer overflow when an overly long AccessCode2 parameter is supplied, allowing an attacker to remotely execute arbitrary code. Affected prod...

CVE-2014-0764 Advantech WebAccess Stack-based Buffer Overflow

By providing an overly long string to the NodeName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then execute code on the target device remotely...

CVE-2014-0770

Summary of CVE-2014-0770: Advantech WebAccess (SCADA/HMI) is affected by a stack-based buffer overflow in the webvact.ocx ActiveX control, triggered by an overly long string supplied to the UserName parameter. This vulnerability could allow remote code execution on the target machine, as describe...

CVE-2014-0773

Advantech WebAccess BWOCXRUN.BwocxrunCtrl.1 ActiveX bwocxrun.ocx contains CreateProcess validation that can be bypassed by command lines containing \setup.exe, \bwvbprt.exe, or \bwvbprtl.exe, allowing arbitrary commands to execute via CreateProcessA. ZDI confirms remote code execution; exploitati...

CVE-2014-0773 Advantech WebAccess Command Injection

The BWOCXRUN.BwocxrunCtrl.1 control contains a method named “CreateProcess.” This method contains validation to ensure an attacker cannot run arbitrary command lines. After validation, the values supplied in the HTML are passed to the Windows CreateProcessA API. The validation can be bypassed...

CVE-2014-0766 Advantech WebAccess Stack-based Buffer Overflow

An attacker can exploit this vulnerability by copying an overly long NodeName2 argument into a statically sized buffer on the stack to overflow the static stack buffer. An attacker may use this vulnerability to remotely execute arbitrary code...

CVE-2014-0771 Advantech WebAccess File and Directory Information Exposure

The BWOCXRUN.BwocxrunCtrl.1 control contains a method named “OpenUrlToBuffer.” This method takes a URL as a parameter and returns its contents to the caller in JavaScript. The URLs are accessed in the security context of the current browser session. The control does not perform any URL validation...

CVE-2014-0767

CVE-2014-0767 is a buffer overflow in Advantech WebAccess’ webvact.ocx ActiveX control, triggered by an overly long AccessCode argument, enabling remote code execution via a crafted webpage. Affected product: Advantech WebAccess (WebAccess Webvact OCX). Root cause: stack-based overflow due to ins...

CVE-2014-0770 Advantech WebAccess Stack-based Buffer Overflow

By providing an overly long string to the UserName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then execute code on the target device remotely...

CVE-2014-0763

Summary of CVE-2014-0763 (Advantech WebAccess) : The vulnerability affects Advantech WebAccess (7.1 and earlier) in the DBVisitor.dll component exposed via SOAP interfaces, where SOAP injection enables SQL injection through the ChartThemeConfig/service vectors. This may allow an attacker to perfo...

CVE-2014-0763 Advantech WebAccess SQL Injection

An attacker using SQL injection may use arguments to construct queries without proper sanitization. The DBVisitor.dll is exposed through SOAP interfaces, and the exposed functions are vulnerable to SOAP injection. This may allow unexpected SQL action and access to records in the table of the...

CVE-2014-0765

CVE-2014-0765 affects Advantech WebAccess (Webvact OCX) where the GotoCmd parameter can overflow a static stack buffer, enabling remote code execution. Multiple documents corroborate a stack-based overflow causing arbitrary code execution, with advisories attributing the issue to Advantech WebAcc...

CVE-2014-0772

Advantech WebAccess is affected by CVE-2014-0772 in the bwocxrun.ocx ActiveX control (BwocxrunCtrl.1). The OpenUrlToBufferTimeout method accepts a URL and returns its contents to JavaScript, executing in the current browser session context. The vulnerability arises from lack of URL validation, al...

CVE-2014-0766

Advantech WebAccess vulnerable to a stack-based buffer overflow in the webvact.ocx NodeName2 parameter, enabling remote code execution. Affected: WebAccess 7.2 and older; vulnerability described as CWE-121 in Core/ICS advisories. Mitigation via WebAccess version 7.2 or newer updates from Advantec...

CVE-2014-0768 Advantech WebAccess Stack-based Buffer Overflow

An attacker may pass an overly long value from the AccessCode2 argument to the control to overflow the static stack buffer. The attacker may then remotely execute arbitrary code...

Advantech WebAccess webvact.ocx NodeName2 Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Advantech WebAccess webvact.ocx AccessCode Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...