PT-2014-4005
CVE-2014-0992
·
Publicado
2014-09-20
·
Atualizado
2015-08-05
Descrição por
CVSS 2.0
6.8
MédiaMétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Advantech WebAccess version 7.2
Description
A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via the
password parameter.Recommendations
For Advantech WebAccess version 7.2, consider restricting access to the login functionality until a patch is available. Avoid using the
password parameter in a way that could trigger the buffer overflow until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾