Unrated severityNVD Advisory· Published Jul 19, 2014· Updated May 6, 2026
CVE-2014-2367
CVE-2014-2367
Description
The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.
Affected products
5cpe:2.3:a:advantech:advantech_webaccess:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:advantech:advantech_webaccess:*:*:*:*:*:*:*:*range: <=7.1
- cpe:2.3:a:advantech:advantech_webaccess:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:advantech:advantech_webaccess:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:advantech:advantech_webaccess:7.0:*:*:*:*:*:*:*
- Advantech/WebAccessv5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- ics-cert.us-cert.gov/advisories/ICSA-14-198-02nvdThird Party AdvisoryUS Government Resource
- webaccess.advantech.comnvd
- www.cisa.gov/news-events/ics-advisories/icsa-14-198-02nvd
News mentions
0No linked articles in our index yet.