CVE-2022-47908

Stack-based buffer overflow vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file...

Cross site scripting

Out-of-bounds write vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file...

Cross site scripting

Out-of-bounds read vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file...

CVE-2022-41645

Out-of-bounds read vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file...

PT-2023-15238 · V-Server · V-Server

Name of the Vulnerable Software and Affected Versions: V-Server versions 4.0.12.0 and earlier Description: The issue is an out-of-bounds write vulnerability that allows a local attacker to obtain information and/or execute arbitrary code. This can be achieved by having a user open a specially...

PT-2023-14006 · V-Server · V-Server

Name of the Vulnerable Software and Affected Versions: V-Server versions 4.0.12.0 and earlier Description: The issue is an out-of-bounds read vulnerability that allows a local attacker to obtain information and/or execute arbitrary code by having a user open a specially crafted project file...

PT-2023-15523 · V-Server · V-Server

Name of the Vulnerable Software and Affected Versions: V-Server versions 4.0.12.0 and earlier Description: A stack-based buffer overflow issue allows a local attacker to obtain information and/or execute arbitrary code by having a user open a specially crafted project file. Recommendations: For...

Fuji Electric V-Server 缓冲区错误漏洞

Fuji Electric V-Server is a software package for collecting and managing real-time field data. An out-of-bounds write vulnerability exists in Fuji Electric V-Server, which can be exploited by an attacker to obtain information and execute arbitrary code by allowing a user to open a specially craft...

CVE-2021-20607

Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by getting a user to open...

CVE-2021-20607

Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by getting a user to open...

CVE-2021-42543

The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown...

CVE-2021-42701

An attacker could prepare a specially crafted project file that, if opened, would attempt to connect to the cloud and trigger a man in the middle MiTM attack. This could allow an attacker to obtain credentials and take over the user’s cloud account...

CVE-2021-42701

An attacker could prepare a specially crafted project file that, if opened, would attempt to connect to the cloud and trigger a man in the middle MiTM attack. This could allow an attacker to obtain credentials and take over the user’s cloud account...

Code injection

The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown...

CVE-2021-42701

CVE-2021-42701 relates to AzeoTech DAQFactory. A crafted project file can trigger a MiTM attempt by connecting to the cloud, potentially exposing credentials and enabling takeover of a user’s cloud account. Affected products: DAQFactory up to all versions 18.1 Build 2347 and earlier. Root cause d...

CVE-2021-42543

CVE-2021-42543 affects DAQFactory by AzeoTech. The vulnerability arises from Use of Inherently Dangerous Function (CWE-242) in DAQFactory project file handling, allowing a crafted project file to trigger code execution, potentially leading to system reboot or shutdown. Affected products: DAQFacto...

CVE-2021-42543 AzeoTech DAQFactory

The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown...

Fuji Electric V-Server Lite 安全漏洞

Fuji Electric V-Server Lite is a remote monitoring software for industrial environments from Fuji Electric Japan. The software collects information from devices such as PLCs, temperature controllers, and inverters. A security vulnerability exists in Fuji Electric Tellus Lite V-Simulator and...

CVE-2021-22792

A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU par...

CVE-2021-22791

A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU part...