ICS Advantech WebAccess SCADA ProjectName Parameter Buffer Overflow -3 (CVE-2014-0991)

Rule ID

1139074

Severity

Medium

Description

The vulnerability is due to insufficient input validation of the ProjectName parameter contained in the webvact.ocx ActiveX control, a part of the WebAccess Client.

Impact

Remote code execution

Recommendation

Update vendor's patch.

IPS Category

ICS threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A