{"id":"CVE-2014-0765","aliases":["EUVD-2014-0796","GHSA-rj4r-c32h-gm33"],"status":"published","title":"Advantech WebAccess Stack-based Buffer Overflow","description":"To exploit this vulnerability, the attacker sends data from the GotoCmd \nargument to control. If the value of the argument is overly long, the \nstatic stack buffer can be overflowed. This will allow the attacker to \nexecute arbitrary code remotely.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.02672,"percentile":0.85851,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-121"],"published":"2014-04-12T01:00:00Z","modified":"2026-06-17T00:03:36Z","products":[{"vendor":"advantech","product":"advantech_webaccess"},{"vendor":"advantech","product":"webaccess"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03"},{"url":"http://www.securityfocus.com/bid/66740","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://webaccess.advantech.com/"},{"url":"http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/66722","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0765"},{"url":"http://webaccess.advantech.com"},{"url":"https://github.com/advisories/GHSA-rj4r-c32h-gm33"}],"sources":{"cve":[{"id":"CVE-2014-0765","title":"Advantech WebAccess Stack-based Buffer Overflow","description":"To exploit this vulnerability, the attacker sends data from the GotoCmd \nargument to control. If the value of the argument is overly long, the \nstatic stack buffer can be overflowed. This will allow the attacker to \nexecute arbitrary code remotely.","status":"published","published":"2014-04-12T01:00:00Z","modified":"2025-09-19T19:09:15.893Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:33:47.330011Z"}],"euvd":[{"id":"EUVD-2014-0796","description":"To exploit this vulnerability, the attacker sends data from the GotoCmd \nargument to control. If the value of the argument is overly long, the \nstatic stack buffer can be overflowed. This will allow the attacker to \nexecute arbitrary code remotely.","status":"published","published":"2014-04-12T01:00:00Z","modified":"2025-09-19T19:09:15Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high"}],"updated_at":"2026-11-02T20:31:41.254663Z"}],"ghsa":[{"id":"GHSA-rj4r-c32h-gm33","title":"Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute...","description":"Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long GotoCmd argument.","status":"published","published":"2022-05-17T04:11:57Z","modified":"2025-09-19T21:31:14Z","cwes":["CWE-119","CWE-121"],"updated_at":"2026-11-02T15:03:40.313612Z"}],"nvd":[{"id":"CVE-2014-0765","description":"To exploit this vulnerability, the attacker sends data from the GotoCmd \nargument to control. If the value of the argument is overly long, the \nstatic stack buffer can be overflowed. This will allow the attacker to \nexecute arbitrary code remotely.","status":"published","published":"2014-04-12T04:37:31.503Z","modified":"2026-06-17T00:03:36.07Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-121","CWE-119"],"updated_at":"2026-11-02T14:02:53.710973Z"}]}}