#VU52 Buffer overflow - CVE-2016-4528

Vulnerability identifier: #VU52

Vulnerability risk: Medium

CVSSv4.0: 1.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2016-4528

CWE-ID: CWE-120

Exploitation vector: Local

Exploit availability: No

Description
The vulnerability allows a local user to insert and run arbitrary code on an affected system.

The vulnerability exists due to boundary error.  A local user can cause a buffer overflow by sending a specially crafted a specially crafted DLL file to vulnerable server.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation
Advantech has released a new version of WebAccess, Version 8.1_20160519, to address the reported vulnerabilities.
This new version is available on:
http://www.advantech.com/industrial-automation/webaccess

External links
https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.