CVE-2014-0764
Advantech WebAccess Stack-based Buffer Overflow
By providing an overly long string to the NodeName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then execute code on the target device remotely.
Exploit likelihood
What each source reports
CVE List Score used
7.5
Advantech WebAccess Stack-based Buffer Overflow
By providing an overly long string to the NodeName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then execute code on the target device remotely.
- Record
CVE-2014-0764- CVSS 2.0
- 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2014-0795
7.5
By providing an overly long string to the NodeName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then execute code on the target device remotely.
- Record
EUVD-2014-0795- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-7967-g4mf-2w52 No score
Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute...
Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long NodeName parameter.
- Record
GHSA-7967-g4mf-2w52- Weakness
- CWE-119, CWE-121
- Updated
- 2026-11-02
NVD
7.5
By providing an overly long string to the NodeName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then execute code on the target device remotely.
- Record
CVE-2014-0764- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-121, CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-0764 is a vulnerability (CVSS 7.5) in Advantech Webaccess, published April 12, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.67%, the 85th percentile. No source names a fixed version.