CVE-2023-0598

GE Digital Proficy iFIX (2022, v6.1, v6.5) are affected by CVE-2023-0598 due to improper generation of code (CWE-94). An attacker could insert malicious configuration files in the web server execution path and gain full control of the HMI software. ICSA-23-073-03 lists the affected products and n...

CVE-2023-0598 GE Digital Proficy Code Injection

GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an attacker to insert malicious configuration files in the expected web server execution path and gain full control of the HMI software...

GE iFIX 代码注入漏洞

GE iFIX is General Electric's GE platform for improving productivity and process control through industrial-grade SCADA and high-performance HMI. A code injection vulnerability exists in GE iFIX. An attacker could use this vulnerability to insert a malicious configuration file into the intended w...

CVE-2023-0622

Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project i.e. HMI files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An attacker could leverage these...

CVE-2023-0621

Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project i.e. HMI files. The product lacks proper validation of user-supplied data, which could result in reads past the end of allocated data structures. An attacker could leverage these...

Out-of-bounds

Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project i.e. HMI files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An attacker could leverage these...

CVE-2023-0621 CVE-2023-0621

Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project i.e. HMI files. The product lacks proper validation of user-supplied data, which could result in reads past the end of allocated data structures. An attacker could leverage these...

CVE-2023-0622 CVE-2023-0622

Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project i.e. HMI files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An attacker could leverage these...

CVE-2023-0622

CVE-2023-0622 affects Horner Automation Cscape Envision RV 4.60. The issue is an out-of-bounds write when parsing project (HMI) files, due to improper validation of user-supplied data, enabling arbitrary code execution in the current process if exploited with local access. Public advisories note ...

Contec CONPROSYS HMI System (CHS) Detection

Binary data contecchsdetect.nbin...

PT-2023-16406 · Unknown · Cscape Envision Rv

Name of the Vulnerable Software and Affected Versions: Cscape Envision RV version 4.60 Description: The issue is related to an out-of-bounds read vulnerability when parsing project files, also known as HMI files. This occurs due to the product's lack of proper validation of user-supplied data,...

Contec CONPROSYS HMI System (CHS) OS Command Injection (CVE-2022-44456)

Binary data contecchscve-2022-44456.nbin...

Mitsubishi Electric Multiple Factory Automation Products (Update D)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: GOT2000 compatible HMI software, CC-Link IE TSN Industrial Managed Switch, MELSEC iQ-R Series OPC UA Server Module Vulnerabilities: Infinite Loop, OS Command Injection 2...

Mitsubishi Electric GOT2000和GT SoftGOT2000 安全漏洞

Mitsubishi Electric GOT2000 and Mitsubishi Electric GT SoftGOT2000 are both products of Mitsubishi Electric Japan.Mitsubishi Electric GOT2000 is a GOT2000 series Mitsubishi Electric GT SoftGOT2000 is an HMI software that runs on PCs and computers. It can monitor and operate the information of FA...

Delta Electronics DOPSoft 缓冲区错误漏洞

Delta Electronics DOPSoft is a Human Machine Interface HMI software package from Delta Electronics, Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft version 4.00.16.22 and prior versions. An attacker can exploit the vulnerability to remotely execute arbitrary code...

Delta Electronics DOPSoft 缓冲区错误漏洞

Delta Electronics DOPSoft is a set of Human Machine Interface HMI software from Delta Electronics Taiwan, China. A buffer error vulnerability exists in Delta Electronics DOPSoft version 4.00.16.22 and prior versions. An attacker can exploit this vulnerability to remotely execute arbitrary code...

CVE-2023-22324

SQL injection vulnerability in the CONPROSYS HMI System CHS Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained...

CVE-2023-22324

SQL injection vulnerability in the CONPROSYS HMI System CHS Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained...

Sql injection

SQL injection vulnerability in the CONPROSYS HMI System CHS Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained...

CVE-2023-22324

SQL injection vulnerability in the CONPROSYS HMI System CHS Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained...