CVE-2014-2368
Advantech WebAccess Unsafe ActiveX Control Marked Safe For Scripting
The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.
Exploit likelihood
What each source reports
CVE List Score used
Advantech WebAccess Unsafe ActiveX Control Marked Safe For Scripting
The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.
- Record
CVE-2014-2368- CVSS 2.0
- 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-623
- Updated
- 2026-11-02
EUVDEUVD-2014-2405
The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.
- Record
EUVD-2014-2405- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-3qw9-q2mc-39j2 No score
The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows...
The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.
- Record
GHSA-3qw9-q2mc-39j2- Weakness
- CWE-200, CWE-623
- Updated
- 2026-11-02
NVD
The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.
- Record
CVE-2014-2368- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-623, CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2368 is a vulnerability (CVSS 7.5) in Advantech Webaccess, published July 19, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.71%, the 77th percentile. No source names a fixed version.