The OpenUrlToBuffer method in the BWOCXRUN.BwocxrunCtrl.1... · CVE-2014-0771 · GitHub Advisory Database · GitHub

The OpenUrlToBuffer method in the BWOCXRUN.BwocxrunCtrl.1...

Moderate severity Unreviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Sep 19, 2025

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

The OpenUrlToBuffer method in the BWOCXRUN.BwocxrunCtrl.1 ActiveX control in bwocxrun.ocx in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a file: URL.

References

Published by the National Vulnerability Database

Apr 12, 2014

Published to the GitHub Advisory Database May 17, 2022

Last updated Sep 19, 2025

Weaknesses

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Learn more on MITRE.

CWE-538

Insertion of Sensitive Information into Externally-Accessible File or Directory

The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information. Learn more on MITRE.