{"id":"CVE-2014-0770","aliases":["EUVD-2014-0801","GHSA-9j43-pj26-jfmp"],"status":"published","title":"Advantech WebAccess Stack-based Buffer Overflow","description":"By providing an overly long string to the UserName parameter, an \nattacker may be able to overflow the static stack buffer. The attacker \nmay then execute code on the target device remotely.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.02622,"percentile":0.85561,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-121"],"published":"2014-04-12T01:00:00Z","modified":"2026-06-17T00:03:36Z","products":[{"vendor":"advantech","product":"advantech_webaccess"},{"vendor":"advantech","product":"webaccess"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03"},{"url":"http://www.securityfocus.com/bid/66740","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://webaccess.advantech.com/"},{"url":"http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03","tags":["x_refsource_MISC","x_transferred","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0770"},{"url":"http://webaccess.advantech.com"},{"url":"https://github.com/advisories/GHSA-9j43-pj26-jfmp"}],"sources":{"cve":[{"id":"CVE-2014-0770","title":"Advantech WebAccess Stack-based Buffer Overflow","description":"By providing an overly long string to the UserName parameter, an \nattacker may be able to overflow the static stack buffer. The attacker \nmay then execute code on the target device remotely.","status":"published","published":"2014-04-12T01:00:00Z","modified":"2025-09-19T19:13:29.027Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:33:47.330011Z"}],"euvd":[{"id":"EUVD-2014-0801","description":"By providing an overly long string to the UserName parameter, an \nattacker may be able to overflow the static stack buffer. The attacker \nmay then execute code on the target device remotely.","status":"published","published":"2014-04-12T01:00:00Z","modified":"2025-09-19T19:13:29Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high"}],"updated_at":"2026-11-02T20:31:41.254663Z"}],"ghsa":[{"id":"GHSA-9j43-pj26-jfmp","title":"Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute...","description":"Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long UserName parameter.","status":"published","published":"2022-05-17T04:47:22Z","modified":"2025-09-19T21:32:19Z","cwes":["CWE-119","CWE-121"],"updated_at":"2026-11-02T15:03:40.313612Z"}],"nvd":[{"id":"CVE-2014-0770","description":"By providing an overly long string to the UserName parameter, an \nattacker may be able to overflow the static stack buffer. The attacker \nmay then execute code on the target device remotely.","status":"published","published":"2014-04-12T04:37:31.627Z","modified":"2026-06-17T00:03:36.653Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-121","CWE-119"],"updated_at":"2026-11-02T14:02:53.710973Z"}]}}