EUVD-2018-6702

Malware in sbrugna...

EUVD-2018-6694

Malware in sbrugna...

EUVD-2018-6698

Malware in sbrugna...

EUVD-2018-9630

Malware in sbrugna...

EUVD-2018-19256

Malware in sbrugna...

CVE-2018-14814

WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation of user-supplied data, which may result in a read past the end of an allocated object...

Code injection

WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation of user-supplied data, which may result in a read past the end of an allocated object...

CVE-2018-14814

PI Studio HMI from Wecon (PI Studio HMI: v4.1.9 and earlier; PI Studio: v4.2.34 and earlier) is affected by an out-of-bounds read (CWE-125) due to improper validation of user-supplied data, potentially reading beyond an allocated object and causing information disclosure. Multiple sources corrobo...

CVE-2018-14814

WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation of user-supplied data, which may result in a read past the end of an allocated object...

Wecon PI Studio HMI and PI Studio Buffer Overflow Vulnerability

Wecon PI Studio HMI and PI Studio are both HMI programming software from Wecon Technologies China. A stack buffer overflow vulnerability exists in Wecon PI Studio HMI version 4.1.9 and earlier and PI Studio version 4.2.34 and earlier. A remote attacker could exploit this vulnerability to execute...

The vulnerability of the development tool PI Studio arises from buffer overflow in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of the development tool PI Studio arises from an overflow in the buffer of the stack. Operating this tool allows a malicious actor to execute arbitrary code...

The vulnerability of the PI Studio XML development tool analyzer arises from incorrect restrictions on XML references to external objects, allowing attackers to disclose protected information.

The vulnerability of the PI Studio XML analysis tool arises from an incorrect limitation on XML references to external objects. Operating this tool may allow a malicious actor to disclose protected information...

The vulnerability of the development tool PI Studio arises from the possibility of writing beyond the boundaries of the allocated buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the development tool PI Studio arises from the possibility of writing beyond the boundaries of the allocated buffer in memory. This allows a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the development tool PI Studio arises from insufficient verification of the data entered by users. This allows attackers to gain access to protected information.

The vulnerability of the development tool PI Studio arises from insufficient verification of the data entered by users. Operating this tool may allow a malicious actor to gain access to protected information...

Wecon PI Studio HMI and PI Studio Buffer Overflow Vulnerability

Wecon PI Studio HMI and PI Studio are both HMI programming software from Wecon Technologies China. An out-of-bounds read vulnerability exists in Wecon PI Studio HMI version 4.1.9 and earlier and PI Studio version 4.2.34 and earlier, where the program fails to properly validate user-submitted data...

CVE-2018-14810

WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior parse files and pass invalidated user data to an unsafe method call, which may allow code to be executed in the context of an administrator...

CVE-2018-17889

In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior when parsing project files, the XMLParser that ships with Wecon PIStudio is vulnerable to a XML external entity injection attack, which may allow sensitive information disclosure...

CVE-2018-14818

Wecon PI Studio HMI/PI Studio contain a stack-based buffer overflow vulnerability (CVE-2018-14818) affecting PI Studio HMI <=4.1.9 and PI Studio <=4.2.34 (also reflected in ICS advisory updates for PI Studio <=4.1.9 and

CVE-2018-17889

Wecon PI Studio HMI and PI Studio are affected by an XML External Entity (XXE) vulnerability in the XMLParser used when parsing project files. The issue, identified as CVE-2018-17889, is in PI Studio HMI 4.1.9 and earlier and PI Studio 4.2.34 and earlier (per CVE records). Connected sources also ...

CVE-2018-14810

CVE-2018-14810 affects WECON PI Studio HMI: parsing of specific files can write past the end of an allocated object in PI Studio HMI 4.1.9 and earlier and PI Studio 4.2.34 and earlier, enabling code execution with administrator privileges. Notable connected sources confirm related out-of-bounds w...