CVE-2014-0768
Advantech WebAccess Stack-based Buffer Overflow
- Published
- Updated
- Reserved
- Assigned by
- icscert
Description
An attacker may pass an overly long value from the AccessCode2 argument to the control to overflow the static stack buffer. The attacker may then remotely execute arbitrary code.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| icscertCNA (assigner) | 2.0 | High7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| NVDNVD · Modified | 2.0 | High7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
- EPSS (exploitation in 30 days)
- 2.7% · top 14% of all CVEs (3 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.
Weakness
Affected products
Advantech · WebAccess
- affected ≤ 7.1
- unaffected 7.2
What to do
Solution: Advantech has created a new version (Version 7.2) that mitigates each of the vulnerabilities described above. Users may download this version from the following location at their web site: http://webaccess.advantech.com/downloads.php?item=software For additional information about WebAccess, please visit the following Advantech web site: http://webaccess.advantech.com/
References (5)
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03 (opens in a new tab)
- 66740 (opens in a new tab)vdb-entryx_refsource_BID
- http://webaccess.advantech.com/ (opens in a new tab)
- http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03 (opens in a new tab)x_refsource_MISCx_transferred
- 66732 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2014-0768)Record last updated .