HIGH🇬🇧 English

CVE-2012-0242

CVSS 10.0v2.0pub. 2012-02-21upd. 2026-04-29

Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via format string specifiers in a message string.

oryginał EN
CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Advantech Webaccess

    APP
    Advantech
    5.0≤ 6.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCE
CWE
Referencje

Powiązane podatności

CVE-2014-2367HIGH7.5ten sam produkt

The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before ...

CVE-2014-2368HIGH7.5ten sam produkt

The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attack...

CVE-2014-2364HIGH7.5ten sam produkt

Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbi...

CVE-2014-2366HIGH9.0ten sam produkt

upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by r...

CVE-2014-0766HIGH7.5ten sam produkt

An attacker can exploit this vulnerability by copying an overly long NodeName2 argument into a statically siz...