CVE-2016-4509

CVE-2016-4509 affects Eaton ELCSoft programming software (ELCSoft) versions 2.4.01 and earlier. A heap-based buffer overflow in elcsoft.exe when processing EPC files can allow remote code execution. ZDI notes the flaw in EPC file handling can overwrite a TList object in memory; exploitation repor...

CVE-2016-4512

The CVE-2016-4512 issue affects Eaton ELCSoft ELCSimulator (infecting the ELCSimulator.exe) in ELCSoft versions 2.4.01 and earlier. The root cause is a stack-based buffer overflow when processing network TCP input, allowing remote attackers to execute arbitrary code with the process’s privileges ...

CVE-2016-4509: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote authenticated users to execute arbitrary code via a crafted file...

PT-2016-5991

Name of the Vulnerable Software and Affected Versions Eaton ELCSoft versions 2.4.01 and earlier Description The issue is related to a heap-based buffer overflow in the elcsoft.exe component, allowing remote authenticated users to execute arbitrary code by providing a crafted file. Recommendations...

Eaton ELCSoft Programming Software Stack Buffer Overflow Vulnerability

Eaton ELCSoft Programming Software is a suite of software for configuring programmable logic controllers. A stack buffer overflow vulnerability exists in Eaton ELCSoft Programming Software, which can be exploited by a remote attacker to submit a special request to execute arbitrary code...

PT-2016-5993

Name of the Vulnerable Software and Affected Versions Eaton ELCSoft versions 2.4.01 and earlier Description The issue is related to a stack-based buffer overflow in the ELCSimulator component. This allows remote attackers to execute arbitrary code via a long packet. Recommendations For versions...

CVE-2016-4512: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in ELCSimulator in Eaton ELCSoft 2.4.01 and earlier allows remote attackers to execute arbitrary code via a long packet...

Eaton ELCSoft Programming Software Heap Buffer Overflow Vulnerability

Eaton ELCSoft Programming Software is a suite of software for configuring programmable logic controllers from Eaton Corporation, USA. A heap buffer overflow vulnerability exists in Eaton ELCSoft Programming Software version 2.4.01 and earlier. A remote attacker could exploit this vulnerability to...

Eaton ELCSoft Programming Software Memory Vulnerabilities

OVERVIEW Ariele Calgaviano working with Zero Day Initiative has identified a heap-based memory corruption vulnerability and a stack buffer overflow vulnerability in Eaton’s ELCSoft programming software. Eaton has released a revision to mitigate these vulnerabilities. These vulnerabilities could b...