PT-2015-4157 · Advantech · Webaccess

Publicado 2015-09-28 · Atualizado 2015-09-29 · CVE-2014-9202

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.0 20150816

Description The issue is related to multiple stack-based buffer overflows in an unspecified DLL file. This allows remote attackers to execute arbitrary code via a crafted file that triggers long string arguments to functions.

Recommendations For versions prior to 8.0 20150816, update to version 8.0 20150816 or later to resolve the issue.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-9202

Produtos afetados

Webaccess

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-9202 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-15-258-04 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9202 · Nota