Description
An attacker may pass an overly long value from the AccessCode2 argument
to the control to overflow the static stack buffer. The attacker may
then remotely execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Advantech | WebAccess | ≤ 7.1 | 7.2 |
Advisories 1
- ICSA-14-079-03 Advantech WebAccess Vulnerabilities CISA ICS & IT advisories · Jun 9, 2025