Stack overflow

InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI formerly InTouch Machine Edition versions prior to 2017 SP2. A remote attacker could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read...

Code injection

InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI formerly InTouch Machine Edition versions prior to 2017 SP2. This vulnerability could allow an unauthenticated user to remotely execute code with the same privileges as that of the InduSoft Web Studio or InTouch Edge HMI formerly...

CVE-2018-17914

InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI formerly InTouch Machine Edition versions prior to 2017 SP2. This vulnerability could allow an unauthenticated user to remotely execute code with the same privileges as that of the InduSoft Web Studio or InTouch Edge HMI formerly...

CVE-2018-17916

InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI formerly InTouch Machine Edition versions prior to 2017 SP2. A remote attacker could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read...

CVE-2018-17914

InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI formerly InTouch Machine Edition versions prior to 2017 SP2. This vulnerability could allow an unauthenticated user to remotely execute code with the same privileges as that of the InduSoft Web Studio or InTouch Edge HMI formerly...

CVE-2018-17916

InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI formerly InTouch Machine Edition versions prior to 2017 SP2. A remote attacker could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read...

CVE-2018-17914

InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI formerly InTouch Machine Edition versions prior to 2017 SP2. This vulnerability could allow an unauthenticated user to remotely execute code with the same privileges as that of the InduSoft Web Studio or InTouch Edge HMI formerly...

CVE-2018-17916

Summary: CVE-2018-17916 affects Schneider Electric/AVEVA InduSoft Web Studio (pre-8.1 SP2) and InTouch Edge HMI (pre-2017 SP2). A remote attacker can trigger a stack-based buffer overflow during tag/alarm/event actions (read/write) via a crafted packet, potentially executing arbitrary code with t...

CVE-2018-17914

CVE-2018-17914 affects Schneider Electric InduSoft Web Studio <8.1 SP2 and InTouch Edge HMI

AVEVA InduSoft Web Studio / InTouch Edge HMI UniSoft.dll wcscpy() Stack Overflow

Binary data scadaavevaiwsitehunisoftstackoverflow.nbin...

CVE-2018-17904

Reliance 4 SCADA/HMI, Version 4.7.3 Update 3 and prior. This vulnerability could allow an unauthorized attacker to inject arbitrary code...

CVE-2018-17904

Reliance 4 SCADA/HMI, Version 4.7.3 Update 3 and prior. This vulnerability could allow an unauthorized attacker to inject arbitrary code...

Code injection

Reliance 4 SCADA/HMI, Version 4.7.3 Update 3 and prior. This vulnerability could allow an unauthorized attacker to inject arbitrary code...

CVE-2018-17904

Reliance 4 SCADA/HMI, Version 4.7.3 Update 3 and prior. This vulnerability could allow an unauthorized attacker to inject arbitrary code...

CVE-2018-17904

Geovap Reliance 4 SCADA/HMI is vulnerable to cross-site scripting (CWE-79) in the web interface. Affected: Reliance 4 SCADA/HMI, Version 4.7.3 Update 3 and earlier. Description in ICS-CERT confirms an unauthenticated remote attacker can inject arbitrary JavaScript via HTTP, potentially impacting ...

GEOVAP Reliance 4 SCADA/HMI

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: GEOVAP Equipment: Reliance 4 SCADA/HMI Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to use HTTP proxy...

Wecon PI Studio HMI and PI Studio XML External Entity Injection Vulnerability

Wecon PI Studio HMI and PI Studio are both HMI programming software from Wecon Technologies China. An XML external entity injection vulnerability exists in XMLParser in Wecon PI Studio HMI 4.1.9 and earlier and PI Studio 4.2.34 and earlier. An attacker can exploit this vulnerability to obtain...

Wecon PI Studio HMI and PI Studio Buffer Overflow Vulnerability

Wecon PI Studio HMI and PI Studio are both HMI programming software from Wecon Technologies China. A stack buffer overflow vulnerability exists in Wecon PI Studio HMI version 4.1.9 and earlier and PI Studio version 4.2.34 and earlier. A remote attacker could exploit this vulnerability to execute...

Wecon PI Studio HMI and PI Studio Buffer Overflow Vulnerability

Wecon PI Studio HMI and PI Studio are both HMI programming software from Wecon Technologies China. An out-of-bounds read vulnerability exists in Wecon PI Studio HMI version 4.1.9 and earlier and PI Studio version 4.2.34 and earlier, where the program fails to properly validate user-submitted data...

Phoenix Contact WebVisit 2985725 - Authentication Bypass Exploit

Exploit for windows platform in category web applications Exploit Title: Phoenix Contact WebVisit 2985725 - Authentication Bypass Date: 2018-09-30 Exploit Author: Deneut Tijl Vendor Homepage: www.phoenixcontact.com Software Link:...