high7.5
CVE-2014-2368
The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.
Impact
The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advantech | Advantech Webaccess | through 7.1 Versions 5.0, 6.0, 7.0 |