What’s Vulnerable › Vulnerabilities

CVE-2014-0768: Advantech WebAccess Stack-based Buffer Overflow

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-04-12 · updated 2026-06-17
• Weakness: CWE-121

Description

An attacker may pass an overly long value from the AccessCode2 argument to the control to overflow the static stack buffer. The attacker may then remotely execute arbitrary code.

Affected products

• Advantech WebAccess: through 7.1; 5.0, 6.0, 7.0

References

• http://webaccess.advantech.com/
• http://www.securityfocus.com/bid/66740
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03
• http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03
• http://www.securityfocus.com/bid/66732

Get alerted when CVE-2014-0768 or the next vulnerability affects your stack