{ "schema_version": "1.4.0", "id": "GHSA-rv58-frxq-x4f4", "modified": "2022-05-24T17:17:28Z", "published": "2022-05-24T17:17:28Z", "aliases": [ "CVE-2020-10638" ], "details": "Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple heap-based buffer overflow vulnerabilities exist caused by a lack of proper validation of the length of user-supplied data, which may allow remote code execution.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10638" }, { "type": "WEB", "url": "https://www.us-cert.gov/ics/advisories/icsa-20-128-01" }, { "type": "WEB", "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-593" }, { "type": "WEB", "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-599" }, { "type": "WEB", "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-600" }, { "type": "WEB", "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-603" }, { "type": "WEB", "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-616" }, { "type": "WEB", "url": "https://www.zerodayinitiative.com/advisories/ZDI-20-621" } ], "database_specific": { "cwe_ids": [ "CWE-787" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2020-05-08T12:15:00Z" } }