WellinTech Vulnerabilities

🗓️ 12 Sep 2013 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 38 Views

WellinTech KingSCADA, KingAlarm&Event, KingGraphic applications have remote code execution and information disclosure vulnerabilities, patched in new version

Reporter	Title	Published	Views	Family All 20
0day.today	KingScada kxClientDownload.ocx ActiveX Remote Code Execution	11 Feb 201400:00	–	zdt
Circl	CVE-2013-2827	11 Feb 201400:00	–	circl
Check Point Advisories	WellinTech Multiple Products kxClientDownload ActiveX Remote Code Execution (CVE-2013-2827)	13 Mar 201400:00	–	checkpoint_advisories
CVE	CVE-2013-2826	15 Jan 201416:00	–	cve
CVE	CVE-2013-2827	15 Jan 201416:00	–	cve
Cvelist	CVE-2013-2826	15 Jan 201416:00	–	cvelist
Cvelist	CVE-2013-2827	15 Jan 201416:00	–	cvelist
Exploit DB	KingScada - kxClientDownload.ocx ActiveX Remote Code Execution (Metasploit)	11 Feb 201400:00	–	exploitdb
EUVD	EUVD-2013-2765	7 Oct 202500:30	–	euvd
Metasploit	KingScada kxClientDownload.ocx ActiveX Remote Code Execution	7 Feb 201400:25	–	metasploit

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2013/icsa-13-344-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-13-344-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

12 Sep 2013 06:00Current

7.5High risk

Vulners AI Score7.5

CVSS 27.5

EPSS0.60519