HIGH🇬🇧 English

CVE-2014-2366

CVSS 9.0v2.0pub. 2014-07-19upd. 2026-05-06

upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code.

oryginał EN
CVSS Vector
AV:N/AC:L/Au:S/C:C/I:C/A:C

  • Advantech Webaccess

    APP
    Advantech
    5.06.07.0≤ 7.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2014-2368HIGH7.5ten sam produkt

The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attack...

CVE-2014-2367HIGH7.5ten sam produkt

The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before ...

CVE-2014-2364HIGH7.5ten sam produkt

Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbi...

CVE-2014-0766HIGH7.5ten sam produkt

An attacker can exploit this vulnerability by copying an overly long NodeName2 argument into a statically siz...

CVE-2014-0764HIGH7.5ten sam produkt

By providing an overly long string to the NodeName parameter, an attacker may be able to overflow the static ...