EDB-17772

PoC

BroadWin Webaccess Client - Multiple Vulnerabilities

view exploit source exploit_dbtype dosauthor Luigi Auriemmapublished 2011-09-02catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2012-0242US	high10.0	6.87% (94th)	Exploit	2012-02-21
Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via format string specifiers in a message string.
CVE-2012-0241US	medium5.0	4.51% (91st)	Exploit	2012-02-21
Advantech/BroadWin WebAccess before 7.0 allows remote attackers to cause a denial of service (memory corruption) via a modified stream identifier to a function.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.