VULNERABILITY INTELLIGENCE
CVE-2014-0767
CVSS score7.5 HIGH
EPSS probability2.67%
CISA KEVNot currently listed
Published2014-04-12
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
An attacker may exploit this vulnerability by passing an overly long value from the AccessCode argument to the control. This will overflow the static stack buffer. The attacker may then execute code on the target device remotely.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-121: Stack-based Buffer Overflow
Primary references
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108