CVE-2014-0773

The BWOCXRUN.BwocxrunCtrl.1 control contains a method named “CreateProcess.” This method contains validation to ensure an attacker cannot run arbitrary command lines. After validation, the values supplied in the HTML are passed to the Windows CreateProcessA API. The validation can be bypassed allowing for running arbitrary command lines. The command line can specify running remote files (example: UNC command line). A function exists at offset 100019B0 of bwocxrun.ocx. Inside this function, there are 3 calls to strstr to check the contents of the user specified command line. If “\setup.exe,” “\bwvbprt.exe,” or “\bwvbprtl.exe” are contained in the command line (strstr returns nonzero value), the command line passes validation and is then passed to CreateProcessA.

• CWE-77

• http://webaccess.advantech.com/
• http://www.securityfocus.com/bid/66740
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-079-03
• http://ics-cert.us-cert.gov/advisories/ICSA-14-079-03US Government Resource

Published

Apr 12, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0767An attacker may exploit this vulnerability by passing an ove…
• CVE-2014-0768An attacker may pass an overly long value from the AccessCod…
• CVE-2014-0769The Festo CECX-X-C1 Modular Master Controller with CoDeSys a…
• CVE-2014-0770By providing an overly long string to the UserName parameter…
• CVE-2014-0771The BWOCXRUN.BwocxrunCtrl.1 control contains a method named …
• CVE-2014-0772The BWOCXRUN.BwocxrunCtrl.1 control contains a method named …
• CVE-2014-0774Stack-based buffer overflow in the C++ sample client in Schn…
• CVE-2014-0775Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-0777The Modbus slave/outstation driver in the OPC Drivers 1.0.20…
• CVE-2014-0778TCPUploader module listens on Port 10651/TCP for incoming co…
• CVE-2014-0779The PLC driver in ServerMain.exe in the Kepware KepServerEX …
• CVE-2014-0780Directory traversal vulnerability in NTWebServer in InduSoft…9.8