What’s Vulnerable › Vulnerabilities

CVE-2014-0767: Advantech WebAccess Stack-based Buffer Overflow

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-04-12 · updated 2026-06-17
• Weakness: CWE-121

Description

An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control. This will overflow the static stack buffer. The attacker may then execute code on the target device remotely.

Affected products

• Advantech WebAccess: through 7.1; 5.0, 6.0, 7.0

References

• http://webaccess.advantech.com/
• http://www.securityfocus.com/bid/66740
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03
• http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03
• http://www.securityfocus.com/bid/66728

Get alerted when CVE-2014-0767 or the next vulnerability affects your stack