CVE-2017-14016
43Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 16%
from disclosure to weapon38 days
Published on NVDNov 6
1st PoC+38d
metasploitNov 2
exploitation probability
16%top 3% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The application lacks proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could allow an attacker to execute arbitrary code under the context of the process.
Affected products
n/a · Advantech WebAccesspublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/43340cve_referencewww.exploit-db.com/exploits/43340/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.