Skip to content
OpenAdvisories

Product · Advantech

WebAccess

31 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5
    CVE-2014-2364 Public exploit EPSS 61%

    Advantech WebAccess Stack-Based Buffer Overflow

    Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter…

  • High 7.5
    CVE-2014-0763 Public exploit EPSS 16%

    Advantech WebAccess SQL Injection

    An attacker using SQL injection may use arguments to construct queries without proper sanitization. The DBVisitor.dll is exposed through SOAP interfaces, and the exposed functions are vulnerable to SOAP injection. This may allow unexpected SQL action and acce…