Vulnerability Details CVE-2014-0763
An attacker using SQL injection may use arguments to construct queries
without proper sanitization. The DBVisitor.dll is exposed through SOAP
interfaces, and the exposed functions are vulnerable to SOAP injection.
This may allow unexpected SQL action and access to records in the table
of the software database or execution of arbitrary code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.533
EPSS Ranking 97.9%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2014-0763
-
cpe:2.3:a:advantech:advantech_webaccess:5.0
-
cpe:2.3:a:advantech:advantech_webaccess:6.0
-
cpe:2.3:a:advantech:advantech_webaccess:7.0