PT-2015-3052 · Advantech · Advantech Webaccess

Praveen Darshanam · Published 2015-09-11 · Updated 2017-09-16 · CVE-2014-9208

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.0.1

Description The issue is caused by multiple stack-based buffer overflows in unspecified DLL files. This allows a remote attacker to execute arbitrary code via unknown vectors.

Recommendations For Advantech WebAccess versions prior to 8.0.1, update to version 8.0.1 or later to resolve the issue.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2016-00257

CVE-2014-9208

Affected Products

Advantech Webaccess

References · 5

• 🔥 https://exploit-db.com/exploits/38108 · Exploit
• https://bdu.fstec.ru/vul/2016-00257 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-9208 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9208 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-15-251-01 · Note