A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper validation of the length of user-supplied data may allow remote code execution.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HAdvantech Webaccess
APPAdvantech≤ 9.02
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEMemory
CWE
Related vulnerabilities
CVE-2021-38389CRITICAL9.8PL ✓same product
Stack-based buffer overflow w Advantech WebAccess umożliwiający RCE
CVE-2021-33023CRITICAL9.8PL ✓same product
Heap-based buffer overflow w Advantech WebAccess umożliwiający RCE
CVE-2020-12019CRITICAL9.8PL ✓same product
Stack-based buffer overflow umożliwiający RCE w Advantech WebAccess Node
CVE-2020-10638CRITICAL9.8PL ✓same product
Wielokrotny heap-based buffer overflow w Advantech WebAccess Node umożliwiający RCE
CVE-2020-12002CRITICAL9.8PL ✓same product
RCE przez wiele podatności buffer overflow w Advantech WebAccess Node