Skip to content
OpenAdvisories
Critical ICSA-14-198-02 5 CVEs

Advantech WebAccess Vulnerabilities

Published Apr 19, 2014 · Updated Jun 6, 2025 · Revision 2

Vendor: Advantech Product: WebAccess

Vulnerabilities 5

  • Critical 9.0
    CVE-2014-2366

    Advantech WebAccess Cleartext Storage of Sensitive Information in Memory

    upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code.

    Advantech WebAccess
  • High 7.5
    CVE-2014-2364 Public exploit EPSS 61%

    Advantech WebAccess Stack-Based Buffer Overflow

    Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter…

    Advantech WebAccess
  • High 7.5
    CVE-2014-2367

    Advantech WebAccess Authentication Bypass Issues

    The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.

    Advantech WebAccess
  • High 7.5
    CVE-2014-2368

    Advantech WebAccess Unsafe ActiveX Control Marked Safe For Scripting

    The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.

    Advantech WebAccess
  • Medium 6.5
    CVE-2014-2365

    Advantech WebAccess Improper Access Control

    Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors.

    Advantech WebAccess

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References