PT-2014-4005
CVE-2014-0992
·
Published
2014-09-20
·
Updated
2015-08-05
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Advantech WebAccess version 7.2
Description
A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via the
password parameter.Recommendations
For Advantech WebAccess version 7.2, consider restricting access to the login functionality until a patch is available. Avoid using the
password parameter in a way that could trigger the buffer overflow until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾