Not rated
CVE-2017-12704 A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817
Description
A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to the heap-based buffer, which could allow an attacker to execute arbitrary code under the context of the process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Advantech WebAccess | Versions not published |
References
- ics-cert.us-cert.gov ics-cert.us-cert.gov
- 100526 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Advantech WebAccess
The 22 CVEs of Advantech WebAccess →
CVE-2021-38408
A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper…
Not rated
CVE-2019-3942
Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files
Not rated
CVE-2020-10607
In Advantech WebAccess, Versions 8.4.2 and prior
Not rated
CVE-2017-16732
A use-after-free issue was discovered in Advantech WebAccess versions prior to 8.3
Not rated