Skip to content
OpenAdvisories

Vendor

Advantech

202 known vulnerabilities.

202 results · Feed

  • High 7.5

    Advantech WebAccess Stack-based Buffer Overflow

    To exploit this vulnerability, the attacker sends data from the GotoCmd argument to control. If the value of the argument is overly long, the static stack buffer can be overflowed. This will allow the attacker to execute arbitrary code remotely.

  • High 7.5

    Advantech WebAccess File and Directory Information Exposure

    The BWOCXRUN.BwocxrunCtrl.1 control contains a method named “OpenUrlToBuffer.” This method takes a URL as a parameter and returns its contents to the caller in JavaScript. The URLs are accessed in the security context of the current browser session. The contr…