Intrusion PreventionAdvantech.WebAccess.SCADA.bwocxrun.OCX.Command.Execution
Description
This indicates an attack attempt against a Command Execution vulnerability in the Advantech WebAccess SCADA.
The vulnerability, which is located in the "bwocxrun.ocx" ActiveX control, can be exploited through a vulnerable function. An attacker can exploit this by tricking an unsuspecting user into visiting a malicious webpage and execute Operating System Commands within the context of the logged in users.
Affected Products
Advantech WebAccess prior to 7.2
Impact
System Compromise: Remote attackers can execute Operating System Commands within the context of the target users
Recommended Actions
Apply the latest update from the vendor.
http://webaccess.advantech.com/downloads.php?item=software
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 38417 |
| Created | May 13, 2014 |
| Updated | May 04, 2022 |
| Risk |
|
| CVE ID | CVE-2014-0773 |
| Exploit Prediction Score | 7.4% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | SCADA |