CVE-2014-3913 Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file.

HighCVSS 10.0 EPSS 60.9% Framework module Public exploit

Published: 2014-06-04 17:00
Updated: 2026-06-17 03:09
Exploit status: Public exploit available

Description

Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file.

Affected products

Product	Affected versions	Fixed in
ericom accessnow server	All versions	No fix listed

References

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 60.86% (percentile 99.2)
CWE: CWE-119

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Ericom AccessNow Server Buffer Overflow Framework module · Metasploit Framework (Rapid7) · 2014-06-02
Ericom AccessNow Server - Remote Buffer Overflow (Metasploit) Exploit · Exploit Database (OffSec) · 2014-06-19