CVE-2014-2364

CVE-2014-2364: Advantech WebAccess Stack-Based Buffer Overflow

Vendor Advantech
Product WebAccess
Weakness CWE-121
Published July 19, 2014
Last update October 6, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10) SetBaud, or (11) IPAddress parameter to an ActiveX control in (a) webvact.ocx, (b) dvs.ocx, or (c) webdact.ocx.

Key dates

02Disclosure timeline

July 19, 2014 CVE published
October 6, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-35751 D-Link DAP-2622 DDP Set AG Profile Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2021-1186 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities CVE-2023-22234 Adobe Premiere Rush PSD file Stack-based Buffer Overflow Arbitrary code execution CVE-2024-4242 Tenda W9 wifiSSIDget formwrlSSIDget stack-based overflow CVE-2024-33599 nscd: Stack-based buffer overflow in netgroup cache