CVE-2018-20410

WellinTech KingSCADA before 3.7.0.0.1 is affected by a stack-based buffer overflow in the AlarmServer (AEserver.exe) service. The vulnerability is triggered by sending a specially crafted packet to the AlarmServer over TCP port 12401. Affected component/version: KingSCADA prior to 3.7.0.0.1. Root...

CVE-2018-20410: Out-of-bounds Write

WellinTech KingSCADA before 3.7.0.0.1 contains a stack-based buffer overflow. The vulnerability is triggered when sending a specially crafted packet to the AlarmServer AEserver.exe service listening on TCP port 12401...

WellinTech KingScada AEserver.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of WellinTech KingScada. Authentication is not required to exploit this vulnerability. The specific flaw exists within the protocol parsing code contained in kxNetDispose.dll. The parent service is...