Critical severity9.8NVD Advisory· Published May 8, 2020· Updated Jun 17, 2026

CVE-2020-12002

Description

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple stack-based buffer overflow vulnerabilities exist caused by a lack of proper validation of the length of user-supplied data, which may allow remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Advantech/Webaccess3 versions
cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*range: <=8.4.4
- cpe:2.3:a:advantech:webaccess:9.0.0:*:*:*:*:*:*:*
- (no CPE)range: <=9.0.0
Advantech/WebAccess Nodedescription

Patches

Vulnerability mechanics

References

www.us-cert.gov/ics/advisories/icsa-20-128-01nvdThird Party AdvisoryUS Government Resource
www.zerodayinitiative.com/advisories/ZDI-20-590/nvdThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-20-591/nvdThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-20-592/nvdThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-20-619/nvdThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-20-622/nvdThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-20-624/nvdThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-20-625/nvdThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-20-633/nvdThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-20-634/nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.007
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000