{"id":"CVE-2014-2364","url":"https://www.cyber-defence.io/tools/cve/CVE-2014-2364","generatedAt":"2026-11-05T06:53:23.594Z","title":"Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7)…","description":"Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10) SetBaud, or (11) IPAddress parameter to an ActiveX control in (a) webvact.ocx, (b) dvs.ocx, or (c) webdact.ocx.","published":"2014-07-19T05:09:28.000Z","lastModified":"2026-06-17T00:06:29.000Z","status":"Modified","sourceIdentifier":"ics-cert@hq.dhs.gov","cvss":{"version":"2.0","score":7.5,"severity":"HIGH","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P"},"cwe":["CWE-121","CWE-119"],"affected":["advantech/advantech webaccess"],"epss":{"score":0.61384,"percentile":0.99167,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2014-09-24","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":34757,"kind":"exploit","title":"Advantech Webaccess - dvs.ocx GetColor Buffer Overflow (Metasploit)","url":"https://www.exploit-db.com/exploits/34757","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/34757.rb","file":"exploits/windows/remote/34757.rb","published":"2014-09-24","added":"2014-09-24","updated":"2014-09-24","author":"Metasploit","type":"remote","platform":"windows","port":null,"verified":true,"codes":["CVE-2014-2364","OSVDB-109329","OSVDB-109328","OSVDB-109327","OSVDB-109326","OSVDB-109325","OSVDB-109324","OSVDB-109323","OSVDB-109322","OSVDB-109321","OSVDB-109320","OSVDB-109319","OSVDB-109315"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"http://ics-cert.us-cert.gov/advisories/ICSA-14-198-02"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 61.4%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://packetstormsecurity.com/files/128384/Advantech-WebAccess-dvs.ocx-GetColor-Buffer-Overflow.html","tags":["Exploit"],"source":"ics-cert@hq.dhs.gov"},{"url":"http://webaccess.advantech.com/","source":"ics-cert@hq.dhs.gov"},{"url":"http://www.securityfocus.com/bid/68714","tags":["Exploit"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-14-198-02","source":"ics-cert@hq.dhs.gov"},{"url":"http://ics-cert.us-cert.gov/advisories/ICSA-14-198-02","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/128384/Advantech-WebAccess-dvs.ocx-GetColor-Buffer-Overflow.html","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/68714","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-2364","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}