Lucene search
RootSSV:62171HistoryApr 15, 2014 - 12:00 a.m.
Advantech WebAccess bwocxrun.ocx CreateProcess方法远程命令执行漏洞
2014-04-1500:00:00
Root
www.seebug.org
8
0.136 Low
EPSS
Percentile
95.6%
CVE ID:CVE-2014-0773
Advantech WebAccess HMI/SCADA是一款HMI/SCADA软件。
Advantech WebAccess BWOCXRUN.BwocxrunCtrl.1 ActiveX控件(bwocxrun.ocx)中的CreateProcess方法存在安全漏洞，如果命令行中包含’\setup.exe’, ‘\bwvbprt.exe’或’\bwvbprtl.exe’，可导致绕过该方法中的命令执行校验机制，以应用程序上下文执行任意命令。
0
Advantech WebAccess 7.1
Advantech WebAccess 7.2版本已修复该漏洞，建议用户下载更新：
http://webaccess.advantech.com/
Related
checkpoint_advisories
checkpoint_advisories
Advantech WebAccess SCADA bwocxrun.ocx Command Execution (CVE-2014-0773)
2014-05-14 00:00:00
cvelist
cvelist
CVE-2014-0773
2014-04-12 01:00:00
prion
prion
Design/Logic Flaw
2014-04-12 04:37:00
cve
cve
CVE-2014-0773
2014-04-12 04:37:31
nvd
nvd
CVE-2014-0773
2014-04-12 04:37:31
zdi
zdi
nessus
nessus
Advantech WebAccess Multiple BWOCXRUN.OCX ActiveX Vulnerabilities
2014-04-14 00:00:00
Advantech WebAccess < 7.2-2013.11.14 Multiple Vulnerabilities
2017-02-14 00:00:00
Advantech WebAccess < 7.2-2013.11.14 Multiple Vulnerabilities
2015-08-17 00:00:00
openvas
openvas
Advantech WebAccess Multiple Vulnerabilities
2014-04-16 00:00:00
ics
ics
Advantech WebAccess Vulnerabilities
2018-09-06 12:00:00