CVE-2014-0763

no score yetEPSS 16%

advantech advantech webaccess: no CVSS score yet. EPSS 16% chance of exploitation in the next 30 days.

An attacker using SQL injection may use arguments to construct queries without proper sanitization. The DBVisitor.dll is exposed through SOAP interfaces, and the exposed functions are vulnerable to SOAP injection. This may allow unexpected SQL action and access to records in the table of the software database or execution of arbitrary code.

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2014-04-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

advantech:advantech_webaccess

References

http://webaccess.advantech.com/
http://www.securityfocus.com/bid/66740
https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03
http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03
http://www.securityfocus.com/bid/66740

Check your stack JSON