Advantech WebAccess HMI Designer Detection (Windows SMB Login)

Detects the installed version of Advantech WebAccess HMI Designer. The script logs in via smb, searches for SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

WECON LeviStudioU Stack Heap Buffer Overflow Vulnerability

WECON LeviStudio is a set of HMI programming software from WECON China. WECON LeviStudioU suffers from a stack heap buffer overflow vulnerability that could allow an attacker to execute remote code...

Rockwell Automation/Allen-Bradley HMI Web Server Detection

Binary data 700318.prm...

The vulnerability of the InTouch HMI platform, caused by an overflow in the stack buffer, allows a malicious actor to execute arbitrary code.

The vulnerability of the InTouch HMI platform arises from an overflow in the buffer in the stack due to insufficient input data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with privileges of the InTouch View process, using a specially crafted packa...

PEPPERL+FUCHS VisuNet RM, VisuNet PC, and Box Thin Client

1. EXECUTIVE SUMMARY CVSS v3 7.5 Vendor: PEPPERL+FUCHS Equipment: VisuNet RM, VisuNet PC, Box Thin Client BTC Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow attackers to intercept sensitive communications, establish a...

WAGO e!DISPLAY 7300T - Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Remote code execution via multiple attack vectors product: WAGO e!DISPLAY 7300T - WP 4.3 480x272 PIO1 vulnerable version: FW 01 - 01.01.1001 fixed version: FW 02 CVE...

(0Day) Advantech WebAccess HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

WAGO e!DISPLAY 7300T XSS / File Upload / Code Execution Vulnerabilities

WAGO e!DISPLAY 7300T WP 4.3 480x272 PIO1 version FW 01 - 01.01.1001 suffer from code execution, cross site scripting, weak permission, and remote file upload vulnerabilities. ======================================================================= title: Remote code execution via multiple attack...

WAGO e!DISPLAY 7300T XSS / File Upload / Code Execution

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Remote code execution via multiple attack vectors product: WAGO e!DISPLAY 7300T - WP 4.3 480x272 PIO1 vulnerable version: FW 01 - 01.01.1001 fixed version: FW 02 CVE...

Memory Corruption Vulnerability in All-in-One Machine Configuration Software 2.0 of Shenzhen Hanglisheng Technology Co.

Ltd. has been committed to industrial automation product development, production and sales since its inception. The company was formerly a trading company specializing in the agency of foreign industrial control products. There is a memory corruption vulnerability in HMICreator-V2.0, the all-in-o...

Memory Read Out-of-Bounds Vulnerability in Inventec VS Series HMI Programming Software

Shenzhen Inventec Electric Co., Ltd. is a product and service provider in the field of electrical transmission, industrial control and new energy. A memory read out-of-bounds vulnerability exists in Inventec's VS series HMI programming software. The vulnerability is caused due to a file failure t...

ICSA-18-151-01_Delta Industrial Automation DOPSoft

1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Delta Electronics Equipment: Delta Industrial Automation DOPSoft Vulnerabilities: Out-of-bounds Read, Heap-based Buffer Overflow, Stack-based Buffer Overflow 2. RISK EVALUATION Successful...

The vulnerability of the software package for creating human-machine interfaces, Advantech WebAccess HMI Designer, relates to a repeated memory release mechanism, allowing an attacker to execute arbitrary code.

The vulnerability of the software package for creating human-machine interfaces, Advantech WebAccess HMI Designer, arises due to repeated memory release. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using specially crafted .pm3 files...

The vulnerability of the software package for creating human-machine interfaces, Advantech WebAccess HMI Designer, arises from data writing beyond the buffer boundaries into memory. This allows a malicious actor to execute arbitrary code.

The vulnerability of the software package for creating human-machine interfaces, Advantech WebAccess HMI Designer, arises from data writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted .pm3 files...

Wecon PI Studio HMI Project Programmer TextContent Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Wecon PI Studio HMI Project Programmer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists ...

CVE-2018-7527

A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: November 11, 2017 and prior by opening a specially crafted file...

Buffer overflow

A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: November 11, 2017 and prior by opening a specially crafted file...

CVE-2018-7527

A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: November 11, 2017 and prior by opening a specially crafted file...

CVE-2018-7527

Summary: CVE-2018-7527 is a stack-based buffer overflow in Wecon LeviStudioU/PI Studio components that can be triggered by opening a specially crafted file. Concrete details across connected advisories show multiple vulnerable entry points, including LeviStudio HMI Editor (Version 1.10, part of L...

CVE-2018-7527

A buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon LeviStudioU 1.8.29, and PI Studio HMI Project Programmer, Build: November 11, 2017 and prior by opening a specially crafted file...