ICS Advantech WebAccess SCADA webvact.ocx AccessCode/AccessCode2 Buffer Overflow -1 (CVE-2014-0767)

Rule ID

1059583

Severity

High

Description

A stack buffer overflow exists in Advantech's WebAccess SCADA software. This is due to insufficient input validation on the AccessCode2 parameter of the webvact.ocx ActiveX control, a part of the WebAccess Client.

Impact

Remote code execution

Recommendation

Update vendor's patch.

IPS Category

ICS threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A