CVE-2014-0767

Description

An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control. This will overflow the static stack buffer. The attacker may then execute code on the target device remotely.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03

http://www.securityfocus.com/bid/66740

http://www.securityfocus.com/bid/66728

http://webaccess.advantech.com/

http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS