RULE(RULE ID:311019)

Rule General Information
Release Date: 2015-08-10
Rule Name: Advantech Webaccess SCADA Projectname Parameter Buffer Overflow Vulnerability -1 (CVE-2014-0991)
Severity:
CVE ID:
Rule Protection Details
Description: Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the projectname parameter.
Impact: A buffer overflow vulnerability can be triggered by an attacker in the context of the vulnerable product. Further attacks include arbitrary code execution and denial of service.
Affected OS: Windows
Reference: SecurityFocusBID:69536
Solutions
More advisories have been published on the website, please visit for more suggestions:
http://support.microsoft.com/kb/240797
http://webaccess.advantech.com/downloads_software.php