VYPR

BWOCXRUN.BwocxrunCtrl ActiveX control

by Advantech

CVEs (1)

  • CVE-2014-0773Apr 12, 2014
    risk 0.00cvss epss 0.03

    The BWOCXRUN.BwocxrunCtrl.1 control contains a method named “CreateProcess.” This method contains validation to ensure an attacker cannot run arbitrary command lines. After validation, the values supplied in the HTML are passed to the Windows CreateProcessA API. The…