VAR-201407-0233
Vulnerability from variot - Updated: 2024-07-23 22:22Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10) SetBaud, or (11) IPAddress parameter to an ActiveX control in (a) webvact.ocx, (b) dvs.ocx, or (c) webdact.ocx. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the webdact.ocx ActiveX Control. The control does not check the length of an attacker-supplied NodeName string before copying it into a fixed length buffer on the stack. This could allow an attacker to execute arbitrary code in the context of the browser process. Advantech WebAccess HMI/SCADA is an HMI/SCADA software. Advantech WebAccess webvact.ocx, dvs.ocx and webdact.ocx ActiveX controls fail to properly handle long-length named ProjectName, SetParameter, NodeName, CCDParameter, SetColor, AlarmImage, GetParameter, GetColor, ServerResponse, SetBaud and IPAddress parameters, and attackers can build malicious A WEB page that entice a user to access, can crash an application or execute arbitrary code. Advantech WebAccess is prone to multiple remote stack-based buffer-overflow vulnerabilities. Failed exploit attempts will likely cause a denial-of-service condition. Advantech WebAccess 7.1 and prior are vulnerable. The software supports dynamic graphic display and real-time data control, and provides functions of remote control and management of automation equipment
Show details on source website{
"affected_products": {
"_id": null,
"data": [
{
"_id": null,
"model": "webaccess",
"scope": null,
"trust": 7.7,
"vendor": "advantech",
"version": null
},
{
"_id": null,
"model": "webaccess",
"scope": "eq",
"trust": 1.6,
"vendor": "advantech",
"version": "7.0"
},
{
"_id": null,
"model": "webaccess",
"scope": "eq",
"trust": 1.6,
"vendor": "advantech",
"version": "5.0"
},
{
"_id": null,
"model": "webaccess",
"scope": "eq",
"trust": 1.6,
"vendor": "advantech",
"version": "6.0"
},
{
"_id": null,
"model": "webaccess",
"scope": "lt",
"trust": 1.4,
"vendor": "advantech",
"version": "7.2"
},
{
"_id": null,
"model": "webaccess",
"scope": "lte",
"trust": 1.0,
"vendor": "advantech",
"version": "7.1"
},
{
"_id": null,
"model": "webaccess",
"scope": "eq",
"trust": 0.6,
"vendor": "advantech",
"version": "7.1"
},
{
"_id": null,
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "advantech webaccess",
"version": "5.0"
},
{
"_id": null,
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "advantech webaccess",
"version": "6.0"
},
{
"_id": null,
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "advantech webaccess",
"version": "7.0"
},
{
"_id": null,
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "advantech webaccess",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "7d7f00b0-463f-11e9-b5c5-000c29342cb1"
},
{
"db": "IVD",
"id": "e485769a-2351-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-14-244"
},
{
"db": "ZDI",
"id": "ZDI-14-252"
},
{
"db": "ZDI",
"id": "ZDI-14-255"
},
{
"db": "ZDI",
"id": "ZDI-14-241"
},
{
"db": "ZDI",
"id": "ZDI-14-246"
},
{
"db": "ZDI",
"id": "ZDI-14-243"
},
{
"db": "ZDI",
"id": "ZDI-14-253"
},
{
"db": "ZDI",
"id": "ZDI-14-242"
},
{
"db": "ZDI",
"id": "ZDI-14-247"
},
{
"db": "ZDI",
"id": "ZDI-14-248"
},
{
"db": "ZDI",
"id": "ZDI-14-254"
},
{
"db": "CNVD",
"id": "CNVD-2014-04544"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-003487"
},
{
"db": "CNNVD",
"id": "CNNVD-201407-476"
},
{
"db": "NVD",
"id": "CVE-2014-2364"
}
]
},
"configurations": {
"_id": null,
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:advantech:advantech_webaccess:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:advantech:advantech_webaccess:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:advantech:advantech_webaccess:5.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:advantech:advantech_webaccess:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "7.1",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2014-2364"
}
]
},
"credits": {
"_id": null,
"data": "Anonymous",
"sources": [
{
"db": "ZDI",
"id": "ZDI-14-252"
},
{
"db": "ZDI",
"id": "ZDI-14-255"
},
{
"db": "ZDI",
"id": "ZDI-14-246"
},
{
"db": "ZDI",
"id": "ZDI-14-253"
},
{
"db": "ZDI",
"id": "ZDI-14-247"
},
{
"db": "ZDI",
"id": "ZDI-14-248"
},
{
"db": "ZDI",
"id": "ZDI-14-254"
}
],
"trust": 4.9
},
"cve": "CVE-2014-2364",
"cvss": {
"_id": null,
"data": [
{
"cvssV2": [
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 7.5,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2014-2364",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 8.5,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2014-04544",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "7d7f00b0-463f-11e9-b5c5-000c29342cb1",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "e485769a-2351-11e6-abef-000c29c66e3d",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-70303",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "ZDI",
"id": "CVE-2014-2364",
"trust": 7.7,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2014-2364",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CNVD",
"id": "CNVD-2014-04544",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201407-476",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "IVD",
"id": "7d7f00b0-463f-11e9-b5c5-000c29342cb1",
"trust": 0.2,
"value": "HIGH"
},
{
"author": "IVD",
"id": "e485769a-2351-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-70303",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "7d7f00b0-463f-11e9-b5c5-000c29342cb1"
},
{
"db": "IVD",
"id": "e485769a-2351-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-14-244"
},
{
"db": "ZDI",
"id": "ZDI-14-252"
},
{
"db": "ZDI",
"id": "ZDI-14-255"
},
{
"db": "ZDI",
"id": "ZDI-14-241"
},
{
"db": "ZDI",
"id": "ZDI-14-246"
},
{
"db": "ZDI",
"id": "ZDI-14-243"
},
{
"db": "ZDI",
"id": "ZDI-14-253"
},
{
"db": "ZDI",
"id": "ZDI-14-242"
},
{
"db": "ZDI",
"id": "ZDI-14-247"
},
{
"db": "ZDI",
"id": "ZDI-14-248"
},
{
"db": "ZDI",
"id": "ZDI-14-254"
},
{
"db": "CNVD",
"id": "CNVD-2014-04544"
},
{
"db": "VULHUB",
"id": "VHN-70303"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-003487"
},
{
"db": "CNNVD",
"id": "CNNVD-201407-476"
},
{
"db": "NVD",
"id": "CVE-2014-2364"
}
]
},
"description": {
"_id": null,
"data": "Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10) SetBaud, or (11) IPAddress parameter to an ActiveX control in (a) webvact.ocx, (b) dvs.ocx, or (c) webdact.ocx. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the webdact.ocx ActiveX Control. The control does not check the length of an attacker-supplied NodeName string before copying it into a fixed length buffer on the stack. This could allow an attacker to execute arbitrary code in the context of the browser process. Advantech WebAccess HMI/SCADA is an HMI/SCADA software. Advantech WebAccess webvact.ocx, dvs.ocx and webdact.ocx ActiveX controls fail to properly handle long-length named ProjectName, SetParameter, NodeName, CCDParameter, SetColor, AlarmImage, GetParameter, GetColor, ServerResponse, SetBaud and IPAddress parameters, and attackers can build malicious A WEB page that entice a user to access, can crash an application or execute arbitrary code. Advantech WebAccess is prone to multiple remote stack-based buffer-overflow vulnerabilities. Failed exploit attempts will likely cause a denial-of-service condition. \nAdvantech WebAccess 7.1 and prior are vulnerable. The software supports dynamic graphic display and real-time data control, and provides functions of remote control and management of automation equipment",
"sources": [
{
"db": "NVD",
"id": "CVE-2014-2364"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-003487"
},
{
"db": "ZDI",
"id": "ZDI-14-243"
},
{
"db": "ZDI",
"id": "ZDI-14-254"
},
{
"db": "ZDI",
"id": "ZDI-14-248"
},
{
"db": "ZDI",
"id": "ZDI-14-247"
},
{
"db": "ZDI",
"id": "ZDI-14-253"
},
{
"db": "ZDI",
"id": "ZDI-14-242"
},
{
"db": "ZDI",
"id": "ZDI-14-246"
},
{
"db": "ZDI",
"id": "ZDI-14-241"
},
{
"db": "ZDI",
"id": "ZDI-14-255"
},
{
"db": "ZDI",
"id": "ZDI-14-252"
},
{
"db": "ZDI",
"id": "ZDI-14-244"
},
{
"db": "CNVD",
"id": "CNVD-2014-04544"
},
{
"db": "BID",
"id": "68714"
},
{
"db": "IVD",
"id": "e485769a-2351-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "7d7f00b0-463f-11e9-b5c5-000c29342cb1"
},
{
"db": "VULHUB",
"id": "VHN-70303"
}
],
"trust": 9.81
},
"exploit_availability": {
"_id": null,
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-70303",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-70303"
}
]
},
"external_ids": {
"_id": null,
"data": [
{
"db": "NVD",
"id": "CVE-2014-2364",
"trust": 11.5
},
{
"db": "ICS CERT",
"id": "ICSA-14-198-02",
"trust": 3.1
},
{
"db": "BID",
"id": "68714",
"trust": 2.0
},
{
"db": "CNNVD",
"id": "CNNVD-201407-476",
"trust": 1.1
},
{
"db": "PACKETSTORM",
"id": "128384",
"trust": 1.1
},
{
"db": "CNVD",
"id": "CNVD-2014-04544",
"trust": 1.0
},
{
"db": "JVNDB",
"id": "JVNDB-2014-003487",
"trust": 0.8
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-2045",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-14-244",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-2062",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-14-252",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-2066",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-14-255",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-2032",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-14-241",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-2065",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-14-246",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-2044",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-14-243",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-2063",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-14-253",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-2043",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-14-242",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-2068",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-14-247",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-2069",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-14-248",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-2064",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-14-254",
"trust": 0.7
},
{
"db": "IVD",
"id": "7D7F00B0-463F-11E9-B5C5-000C29342CB1",
"trust": 0.2
},
{
"db": "IVD",
"id": "E485769A-2351-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "EXPLOIT-DB",
"id": "34757",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-70303",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "7d7f00b0-463f-11e9-b5c5-000c29342cb1"
},
{
"db": "IVD",
"id": "e485769a-2351-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-14-244"
},
{
"db": "ZDI",
"id": "ZDI-14-252"
},
{
"db": "ZDI",
"id": "ZDI-14-255"
},
{
"db": "ZDI",
"id": "ZDI-14-241"
},
{
"db": "ZDI",
"id": "ZDI-14-246"
},
{
"db": "ZDI",
"id": "ZDI-14-243"
},
{
"db": "ZDI",
"id": "ZDI-14-253"
},
{
"db": "ZDI",
"id": "ZDI-14-242"
},
{
"db": "ZDI",
"id": "ZDI-14-247"
},
{
"db": "ZDI",
"id": "ZDI-14-248"
},
{
"db": "ZDI",
"id": "ZDI-14-254"
},
{
"db": "CNVD",
"id": "CNVD-2014-04544"
},
{
"db": "VULHUB",
"id": "VHN-70303"
},
{
"db": "BID",
"id": "68714"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-003487"
},
{
"db": "CNNVD",
"id": "CNNVD-201407-476"
},
{
"db": "NVD",
"id": "CVE-2014-2364"
}
]
},
"id": "VAR-201407-0233",
"iot": {
"_id": null,
"data": true,
"sources": [
{
"db": "IVD",
"id": "7d7f00b0-463f-11e9-b5c5-000c29342cb1"
},
{
"db": "IVD",
"id": "e485769a-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-04544"
},
{
"db": "VULHUB",
"id": "VHN-70303"
}
],
"trust": 1.5326718400000001
},
"iot_taxonomy": {
"_id": null,
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 1.0
}
],
"sources": [
{
"db": "IVD",
"id": "7d7f00b0-463f-11e9-b5c5-000c29342cb1"
},
{
"db": "IVD",
"id": "e485769a-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-04544"
}
]
},
"last_update_date": "2024-07-23T22:22:21.013000Z",
"patch": {
"_id": null,
"data": [
{
"title": "Advantech has issued an update to correct this vulnerability.",
"trust": 7.7,
"url": "http://ics-cert.us-cert.gov/advisories/icsa-14-198-02"
},
{
"title": "Downloads ::: WebAccess Software",
"trust": 0.8,
"url": "http://webaccess.advantech.com/downloads.php?item=software"
},
{
"title": "Advantech WebAccess",
"trust": 0.8,
"url": "http://webaccess.advantech.com/"
},
{
"title": "Advantech WebAccess patch for multiple ActiveX control buffer overflow vulnerabilities",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/47828"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-14-244"
},
{
"db": "ZDI",
"id": "ZDI-14-252"
},
{
"db": "ZDI",
"id": "ZDI-14-255"
},
{
"db": "ZDI",
"id": "ZDI-14-241"
},
{
"db": "ZDI",
"id": "ZDI-14-246"
},
{
"db": "ZDI",
"id": "ZDI-14-243"
},
{
"db": "ZDI",
"id": "ZDI-14-253"
},
{
"db": "ZDI",
"id": "ZDI-14-242"
},
{
"db": "ZDI",
"id": "ZDI-14-247"
},
{
"db": "ZDI",
"id": "ZDI-14-248"
},
{
"db": "ZDI",
"id": "ZDI-14-254"
},
{
"db": "CNVD",
"id": "CNVD-2014-04544"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-003487"
}
]
},
"problemtype_data": {
"_id": null,
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-70303"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-003487"
},
{
"db": "NVD",
"id": "CVE-2014-2364"
}
]
},
"references": {
"_id": null,
"data": [
{
"trust": 10.8,
"url": "http://ics-cert.us-cert.gov/advisories/icsa-14-198-02"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/bid/68714"
},
{
"trust": 1.1,
"url": "http://packetstormsecurity.com/files/128384/advantech-webaccess-dvs.ocx-getcolor-buffer-overflow.html"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-2364"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-2364"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-14-244"
},
{
"db": "ZDI",
"id": "ZDI-14-252"
},
{
"db": "ZDI",
"id": "ZDI-14-255"
},
{
"db": "ZDI",
"id": "ZDI-14-241"
},
{
"db": "ZDI",
"id": "ZDI-14-246"
},
{
"db": "ZDI",
"id": "ZDI-14-243"
},
{
"db": "ZDI",
"id": "ZDI-14-253"
},
{
"db": "ZDI",
"id": "ZDI-14-242"
},
{
"db": "ZDI",
"id": "ZDI-14-247"
},
{
"db": "ZDI",
"id": "ZDI-14-248"
},
{
"db": "ZDI",
"id": "ZDI-14-254"
},
{
"db": "CNVD",
"id": "CNVD-2014-04544"
},
{
"db": "VULHUB",
"id": "VHN-70303"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-003487"
},
{
"db": "CNNVD",
"id": "CNNVD-201407-476"
},
{
"db": "NVD",
"id": "CVE-2014-2364"
}
]
},
"sources": {
"_id": null,
"data": [
{
"db": "IVD",
"id": "7d7f00b0-463f-11e9-b5c5-000c29342cb1",
"ident": null
},
{
"db": "IVD",
"id": "e485769a-2351-11e6-abef-000c29c66e3d",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-14-244",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-14-252",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-14-255",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-14-241",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-14-246",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-14-243",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-14-253",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-14-242",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-14-247",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-14-248",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-14-254",
"ident": null
},
{
"db": "CNVD",
"id": "CNVD-2014-04544",
"ident": null
},
{
"db": "VULHUB",
"id": "VHN-70303",
"ident": null
},
{
"db": "BID",
"id": "68714",
"ident": null
},
{
"db": "JVNDB",
"id": "JVNDB-2014-003487",
"ident": null
},
{
"db": "CNNVD",
"id": "CNNVD-201407-476",
"ident": null
},
{
"db": "NVD",
"id": "CVE-2014-2364",
"ident": null
}
]
},
"sources_release_date": {
"_id": null,
"data": [
{
"date": "2014-07-24T00:00:00",
"db": "IVD",
"id": "7d7f00b0-463f-11e9-b5c5-000c29342cb1",
"ident": null
},
{
"date": "2014-07-24T00:00:00",
"db": "IVD",
"id": "e485769a-2351-11e6-abef-000c29c66e3d",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-244",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-252",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-255",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-241",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-246",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-243",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-253",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-242",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-247",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-248",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-254",
"ident": null
},
{
"date": "2014-07-24T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-04544",
"ident": null
},
{
"date": "2014-07-19T00:00:00",
"db": "VULHUB",
"id": "VHN-70303",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "BID",
"id": "68714",
"ident": null
},
{
"date": "2014-07-22T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-003487",
"ident": null
},
{
"date": "2014-07-24T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201407-476",
"ident": null
},
{
"date": "2014-07-19T05:09:27.563000",
"db": "NVD",
"id": "CVE-2014-2364",
"ident": null
}
]
},
"sources_update_date": {
"_id": null,
"data": [
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-244",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-252",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-255",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-241",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-246",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-243",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-253",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-242",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-247",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-248",
"ident": null
},
{
"date": "2014-07-18T00:00:00",
"db": "ZDI",
"id": "ZDI-14-254",
"ident": null
},
{
"date": "2014-07-24T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-04544",
"ident": null
},
{
"date": "2015-08-11T00:00:00",
"db": "VULHUB",
"id": "VHN-70303",
"ident": null
},
{
"date": "2014-09-25T00:03:00",
"db": "BID",
"id": "68714",
"ident": null
},
{
"date": "2014-07-22T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-003487",
"ident": null
},
{
"date": "2014-07-24T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201407-476",
"ident": null
},
{
"date": "2015-08-11T14:38:48.603000",
"db": "NVD",
"id": "CVE-2014-2364",
"ident": null
}
]
},
"threat_type": {
"_id": null,
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201407-476"
}
],
"trust": 0.6
},
"title": {
"_id": null,
"data": "Advantech WebAccess Vulnerable to stack-based buffer overflow",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-003487"
}
],
"trust": 0.8
},
"type": {
"_id": null,
"data": "Buffer overflow",
"sources": [
{
"db": "IVD",
"id": "7d7f00b0-463f-11e9-b5c5-000c29342cb1"
},
{
"db": "IVD",
"id": "e485769a-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNNVD",
"id": "CNNVD-201407-476"
}
],
"trust": 1.0
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…