PT-2015-4157 · Advantech · Webaccess

Published 2015-09-28 · Updated 2015-09-29 · CVE-2014-9202

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.0 20150816

Description The issue is related to multiple stack-based buffer overflows in an unspecified DLL file. This allows remote attackers to execute arbitrary code via a crafted file that triggers long string arguments to functions.

Recommendations For versions prior to 8.0 20150816, update to version 8.0 20150816 or later to resolve the issue.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2014-9202

Affected Products

Webaccess

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-9202 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-15-258-04 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9202 · Note