Lucene search
RootSSV:62173HistoryApr 15, 2014 - 12:00 a.m.
Advantech WebAccess bwocxrun.ocx任意文件访问漏洞
2014-04-1500:00:00
Root
www.seebug.org
19
0.022 Low
EPSS
Percentile
89.6%
CVE ID:CVE-2014-0771
Advantech WebAccess HMI/SCADA是一款HMI/SCADA软件。
Advantech WebAccess BWOCXRUN.BwocxrunCtrl.1 ActiveX控件(bwocxrun.ocx)中的OpenUrlToBuffer方法存在安全漏洞，由于程序不正确对’file://’ URL进行校验，允许攻击者访问任意文件。
0
Advantech WebAccess 7.1
Advantech WebAccess 7.2版本已修复该漏洞，建议用户下载使用：
http://webaccess.advantech.com/
Related
cve
cve
CVE-2014-0771
2014-04-12 04:37:31
zdi
zdi
prion
prion
Buffer overflow
2014-04-12 04:37:00
cvelist
cvelist
CVE-2014-0771
2014-04-12 01:00:00
nvd
nvd
CVE-2014-0771
2014-04-12 04:37:31
nessus
nessus
Advantech WebAccess Multiple BWOCXRUN.OCX ActiveX Vulnerabilities
2014-04-14 00:00:00
Advantech WebAccess < 7.2-2013.11.14 Multiple Vulnerabilities
2017-02-14 00:00:00
Advantech WebAccess < 7.2-2013.11.14 Multiple Vulnerabilities
2015-08-17 00:00:00
ics
ics
Advantech WebAccess Vulnerabilities
2018-09-06 12:00:00
openvas
openvas
Advantech WebAccess Multiple Vulnerabilities
2014-04-16 00:00:00