CVE-2014-0767
Advantech WebAccess Stack-based Buffer Overflow
- Published
- Updated
- Reserved
- Assigned by
- icscert
Description
An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control. This will overflow the static stack buffer. The attacker may then execute code on the target device remotely.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| icscertCNA (assigner) | 2.0 | High7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| NVDNVD · Modified | 2.0 | High7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
- EPSS (exploitation in 30 days)
- 2.7% · top 14% of all CVEs (3 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.
Weakness
Affected products
What to do
Solution: Advantech has created a new version (Version 7.2) that mitigates each of the vulnerabilities described above. Users may download this version from the following location at their web site: http://webaccess.advantech.com/downloads.php?item=software For additional information about WebAccess, please visit the following Advantech web site: http://webaccess.advantech.com/
References (5)
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03 (opens in a new tab)
- 66740 (opens in a new tab)vdb-entryx_refsource_BID
- http://webaccess.advantech.com/ (opens in a new tab)
- http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03 (opens in a new tab)x_refsource_MISCx_transferred
- 66728 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2014-0767)Record last updated .