10
CVE-2012-0242
- EPSS 7.25%
- Veröffentlicht 21.02.2012 13:31:57
- Zuletzt bearbeitet 16.06.2026 23:36:58
- Quelle cret@cert.org
- CVE-Watchlists
- Unerledigt
LoginFormat string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via format string specifiers in a message string.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Advantech ≫ Advantech Webaccess Version <= 6.0
Advantech ≫ Advantech Webaccess Version5.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 7.25% | 0.935 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-134 Use of Externally-Controlled Format String
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
http://www.securityfocus.com/bid/52051
http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf