CVE-2014-0768

critical

Description

An attacker may pass an overly long value from the AccessCode2 argument to the control to overflow the static stack buffer. The attacker may then remotely execute arbitrary code.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03

http://www.securityfocus.com/bid/66740

http://www.securityfocus.com/bid/66732

http://webaccess.advantech.com/

http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03

Details

Source: Mitre, NVD

Published: 2014-04-12

Updated: 2025-09-19

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.01493

Detections

Analytics