HIGH🇬🇧 English

CVE-2014-2368

CVSS 7.5v2.0pub. 2014-07-19upd. 2026-05-06

The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.

oryginał EN
CVSS Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Advantech Webaccess

    APP
    Advantech
    5.06.07.0≤ 7.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2014-2367HIGH7.5ten sam produkt

The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before ...

CVE-2014-2366HIGH9.0ten sam produkt

upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by r...

CVE-2014-2364HIGH7.5ten sam produkt

Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbi...

CVE-2014-0766HIGH7.5ten sam produkt

An attacker can exploit this vulnerability by copying an overly long NodeName2 argument into a statically siz...

CVE-2014-0764HIGH7.5ten sam produkt

By providing an overly long string to the NodeName parameter, an attacker may be able to overflow the static ...