NetSight
high7.5

CVE-2014-2367

The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary fil…

Impact

The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.

Affected products

VendorProductAffected versions
AdvantechAdvantech Webaccess
through 7.1
Versions 5.0, 6.0, 7.0

Weakness classification

References