PT-2016-5095

Name of the Vulnerable Software and Affected Versions Pro-face GP-Pro EX EX-ED versions prior to 4.05.000 Pro-face GP-Pro EX PFXEXEDV versions prior to 4.05.000 Pro-face GP-Pro EX PFXEXEDLS versions prior to 4.05.000 Pro-face GP-Pro EX PFXEXGRPLS versions prior to 4.05.000 Description A stack-bas...

PT-2016-5093

Name of the Vulnerable Software and Affected Versions Pro-face GP-Pro EX EX-ED versions prior to 4.05.000 Pro-face PFXEXEDV versions prior to 4.05.000 Pro-face PFXEXEDLS versions prior to 4.05.000 Pro-face PFXEXGRPLS versions prior to 4.05.000 Description A heap-based buffer overflow issue allows...

PT-2016-5094

Name of the Vulnerable Software and Affected Versions Pro-face GP-Pro EX EX-ED versions prior to 4.05.000 Pro-face PFXEXEDV versions prior to 4.05.000 Pro-face PFXEXEDLS versions prior to 4.05.000 Pro-face PFXEXGRPLS versions prior to 4.05.000 Description The issue allows remote attackers to...

CVE-2016-2290: Out-of-bounds Write

Heap-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2016-2291: Out-of-bounds Read

Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allow remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via unspecified vectors...

PT-2016-3839

Name of the Vulnerable Software and Affected Versions Pro-face GP-Pro EX EX-ED versions prior to 4.05.000 Pro-face PFXEXEDV versions prior to 4.05.000 Pro-face PFXEXEDLS versions prior to 4.05.000 Pro-face PFXEXGRPLS versions prior to 4.05.000 Description The issue concerns hardcoded credentials ...

CVE-2015-7921: Undefined Security Weakness

The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of these credentials...

Digital Electronics Proface GP-Pro EX Arbitrary Code Execution Vulnerability

Digital Electronics Proface GP-Pro EX is a programmable HMI product from Digital Electronics Japan. A security vulnerability exists in the Digital Electronics Proface GP-Pro EX that could be exploited by a remote attacker to execute arbitrary code in the context of an application...

Proface GP-Pro EX Out-of-Bounds Read Information Disclosure Vulnerability

Proface GP-Pro EX is human-machine interface HMI software used on multiple platforms. A security vulnerability exists in Proface GP-Pro EX in BeginPreRead when handling malformed 0x7f77 type fields. An attacker could exploit this vulnerability to read out-of-bounds and obtain arbitrary memory...

Proface GP-Pro EX Stack Buffer Overflow Remote Code Execution Vulnerability

Proface GP-Pro EX is human-machine interface HMI software used on multiple platforms. A security vulnerability exists in Proface GP-Pro EX in BeginPreRead when handling malformed 0x7f77 type fields. An attacker could exploit this vulnerability to cause a stack buffer overflow and execute arbitrar...

(0Day) Proface GP-Pro EX Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose information on vulnerable installations of Proface GP-Pro EX. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BeginPreRead...

(0Day) Proface GP-Pro EX Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Proface GP-Pro EX. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BeginPreRead...

(0Day) Proface GP-Pro EX D-Script Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Proface GP-Pro EX. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

(0Day) Proface GP-Pro EX Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose information on vulnerable installations of Proface GP-Pro EX. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BeginPreRead...

Pro-face GP-Pro EX HMI Vulnerabilities

OVERVIEW ZDI Zero Day Initiative has identified one information disclosure and two buffer overflow vulnerabilities, and independent researcher Jeremy Brown has identified hard-coded credentials in Pro-face’s GP-Pro EX HMI software. Pro-face has produced a module to mitigate these vulnerabilities...