What’s Vulnerable › Vulnerabilities

CVE-2014-0770: Advantech WebAccess Stack-based Buffer Overflow

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-04-12 · updated 2026-06-17
• Weakness: CWE-121

Description

By providing an overly long string to the UserName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then execute code on the target device remotely.

Affected products

• Advantech WebAccess: through 7.1; 5.0, 6.0, 7.0

References

• http://webaccess.advantech.com/
• http://www.securityfocus.com/bid/66740
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03
• http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03

Get alerted when CVE-2014-0770 or the next vulnerability affects your stack