Wellintech: Security Vulnerabilities
Stack-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 555.
CVSS Score
10.0
EPSS Score
0.077
Published
2012-07-05
Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 555.
CVSS Score
10.0
EPSS Score
0.159
Published
2012-07-05
WellinTech KingView 6.53 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a crafted packet to (1) TCP or (2) UDP port 2001.
CVSS Score
10.0
EPSS Score
0.059
Published
2012-07-05
WellinTech KingHistorian 3.0 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer write) via a crafted packet to TCP port 5678.
CVSS Score
10.0
EPSS Score
0.046
Published
2012-07-05
Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a crafted HTTP request to port 8001.
CVSS Score
5.0
EPSS Score
0.026
Published
2012-07-05
WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.
CVSS Score
7.1
EPSS Score
0.008
Published
2012-05-09
Untrusted search path vulnerability in WellinTech KingView 6.53 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
CVSS Score
9.3
EPSS Score
0.017
Published
2012-05-02
Heap-based buffer overflow in nettransdll.dll in HistorySvr.exe (aka HistoryServer.exe) in WellinTech KingView 6.53 and 65.30.2010.18018 allows remote attackers to execute arbitrary code via a crafted op-code 3 packet.
CVSS Score
10.0
EPSS Score
0.086
Published
2011-12-27
Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote attackers to execute arbitrary code via a long second argument to the ValidateUser method.
CVSS Score
10.0
EPSS Score
0.388
Published
2011-08-16
Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP port 777.
CVSS Score
10.0
EPSS Score
0.209
Published
2011-01-11