Vulnerability Details : CVE-2017-14016

Products affected by CVE-2017-14016

Metasploit modules for CVE-2017-14016

• Advantech WebAccess Webvrpcs Service Opcode 80061 Stack Buffer Overflow

  Disclosure Date: 2017-11-02

  First seen: 2020-04-26

  exploit/windows/scada/advantech_webaccess_webvrpcs_bof

  This module exploits a stack buffer overflow in Advantech WebAccess 8.2. By sending a specially crafted DCERPC request, an attacker could overflow the buffer and execute arbitrary code. Authors: - mr_me <mr_me@offensive-security.com>

  More information

CVSS scores for CVE-2017-14016

CWE ids for CVE-2017-14016

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
  The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
  Assigned by: nvd@nist.gov (Primary)
• CWE-121 Stack-based Buffer Overflow
  A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
  Assigned by: ics-cert@hq.dhs.gov (Secondary)

References for CVE-2017-14016