{"id":"CVE-2014-0767","aliases":["EUVD-2014-0798","GHSA-h6fc-w6r4-3f5v"],"status":"published","title":"Advantech WebAccess Stack-based Buffer Overflow","description":"An attacker may exploit this vulnerability by passing an overly long \nvalue from the AccessCode argument to the control. This will overflow \nthe static stack buffer. The attacker may then execute code on the \ntarget device remotely.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.02672,"percentile":0.85851,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-121"],"published":"2014-04-12T01:00:00Z","modified":"2026-06-17T00:03:36Z","products":[{"vendor":"advantech","product":"advantech_webaccess"},{"vendor":"advantech","product":"webaccess"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03"},{"url":"http://www.securityfocus.com/bid/66740","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://webaccess.advantech.com/"},{"url":"http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/66728","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0767"},{"url":"http://webaccess.advantech.com"},{"url":"https://github.com/advisories/GHSA-h6fc-w6r4-3f5v"}],"sources":{"cve":[{"id":"CVE-2014-0767","title":"Advantech WebAccess Stack-based Buffer Overflow","description":"An attacker may exploit this vulnerability by passing an overly long \nvalue from the AccessCode argument to the control. This will overflow \nthe static stack buffer. The attacker may then execute code on the \ntarget device remotely.","status":"published","published":"2014-04-12T01:00:00Z","modified":"2025-09-19T19:11:31.813Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:33:47.330011Z"}],"euvd":[{"id":"EUVD-2014-0798","description":"An attacker may exploit this vulnerability by passing an overly long \nvalue from the AccessCode argument to the control. This will overflow \nthe static stack buffer. The attacker may then execute code on the \ntarget device remotely.","status":"published","published":"2014-04-12T01:00:00Z","modified":"2025-09-19T19:11:31Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high"}],"updated_at":"2026-11-02T20:31:41.254663Z"}],"ghsa":[{"id":"GHSA-h6fc-w6r4-3f5v","title":"Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute...","description":"Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long AccessCode argument.","status":"published","published":"2022-05-17T04:11:58Z","modified":"2025-09-19T21:32:14Z","cwes":["CWE-119","CWE-121"],"updated_at":"2026-11-02T15:03:40.313612Z"}],"nvd":[{"id":"CVE-2014-0767","description":"An attacker may exploit this vulnerability by passing an overly long \nvalue from the AccessCode argument to the control. This will overflow \nthe static stack buffer. The attacker may then execute code on the \ntarget device remotely.","status":"published","published":"2014-04-12T04:37:31.567Z","modified":"2026-06-17T00:03:36.3Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-121","CWE-119"],"updated_at":"2026-11-02T14:02:53.710973Z"}]}}