RULE(RULE ID:322008)

Rule General Information
Release Date: 2019-06-26
Rule Name: Advantech WebAccess SCADA webvact AccessCode Buffer overflow Vulnerability (CVE-2014-0767)
Severity:
CVE ID:
Rule Protection Details
Description: Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long AccessCode argument.
Impact: A buffer overflow vulnerability can be triggered by an attacker in the context of the vulnerable product. Further attacks includes arbitrary code execution and denial of service.
Affected OS: Windows, Linux, FreeBSD, Solaris, Other Unix, Network Device, Mac OS, iOS, Android, Others
Reference: SecurityFocusBID:66728
http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
http://webaccess.advantech.com/downloads.php?item=software