Advantech/BroadWin WebAccess 6.0
Approved changes feed: RSS · Atom
cpe:2.3:a:advantech:advantech_webaccess:6.0:*:*:*:*:*:*:*
part: a version: 6.0 update: *
| Vendor | Advantech (fedf766b-bee1-5692-bcc7-1aa8d9dc594c) |
|---|---|
| Product | Advantech Webaccess (42aab0b5-c1b2-5ea8-bafe-ca38a577b890) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-2368 |
vulnerable | 2026-06-08 05:05:28.633450 |
Advantech WebAccess Unsafe ActiveX Control Marked Safe For Scripting
The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.
Published: 2014-07-19T01:00:00.000Z
Updated: 2025-10-06T17:46:06.036Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2367 |
vulnerable | 2026-06-08 05:05:28.633070 |
Advantech WebAccess Authentication Bypass Issues
The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.
Published: 2014-07-19T01:00:00.000Z
Updated: 2025-10-06T17:48:24.247Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2366 |
vulnerable | 2026-06-08 05:05:28.632681 |
Advantech WebAccess Cleartext Storage of Sensitive Information in Memory
upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code.
Published: 2014-07-19T01:00:00.000Z
Updated: 2025-10-06T17:50:01.014Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2365 |
vulnerable | 2026-06-08 05:05:28.632277 |
Advantech WebAccess Improper Access Control
Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors.
Published: 2014-07-19T01:00:00.000Z
Updated: 2025-10-06T17:51:28.289Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2364 |
vulnerable | 2026-06-08 05:05:28.631293 |
Advantech WebAccess Stack-Based Buffer Overflow
Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10) SetBaud, or (11) IPAddress parameter to an ActiveX control in (a) webvact.ocx, (b) dvs.ocx, or (c) webdact.ocx.
Published: 2014-07-19T01:00:00.000Z
Updated: 2025-10-06T17:52:36.174Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0773 |
vulnerable | 2026-06-08 05:05:14.266737 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0772 |
vulnerable | 2026-06-08 05:05:14.266354 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0771 |
vulnerable | 2026-06-08 05:05:14.265941 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0770 |
vulnerable | 2026-06-08 05:05:14.265449 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0768 |
vulnerable | 2026-06-08 05:05:14.264660 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0767 |
vulnerable | 2026-06-08 05:05:14.264292 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0766 |
vulnerable | 2026-06-08 05:05:14.263913 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0765 |
vulnerable | 2026-06-08 05:05:14.263522 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0764 |
vulnerable | 2026-06-08 05:05:14.263080 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0763 |
vulnerable | 2026-06-08 05:05:14.261860 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2299 |
vulnerable | 2026-06-08 05:04:24.590775 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.