Lucene search
+L

71 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/11/18 12:0 a.m.27 views

WECON PLC Editor WCP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

7.8CVSS7.7AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/18 12:0 a.m.30 views

WECON PLC Editor WCP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

7.8CVSS7.7AI score0.00973EPSS
Exploits0References1
CNVD
CNVD
added 2021/11/12 12:0 a.m.89 views

WECON PLC Editor Stack Buffer Overflow Vulnerability (CNVD-2021-93633)

WECON PLC Editor is a PLC programming software.WECON PLC Editor 1.3.8 and earlier versions are vulnerable to a stack buffer overflow. An attacker can exploit this vulnerability to execute arbitrary code...

7.8CVSS6.3AI score0.00973EPSS
Exploits0References1
CNVD
CNVD
added 2021/11/12 12:0 a.m.68 views

WECON PLC Editor Out-of-Bounds Writing Vulnerability

WECON PLC Editor is a PLC programming software.An out-of-bounds write vulnerability exists in WECON PLC Editor 1.3.8 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

7.8CVSS5.6AI score0.00912EPSS
Exploits0References1
ICS
ICS
added 2021/11/11 12:0 a.m.47 views

WECON PLC Editor

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: WECON Equipment: PLC Editor Vulnerabilities: Stack-based Buffer Overflow, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities may allow arbitrary code execution. 3. TECHNICAL DETAILS 3.1...

7.8CVSS8.4AI score0.00973EPSS
Exploits0References5
NVD
NVD
added 2020/12/01 3:15 p.m.33 views

CVE-2020-25177

WECON PLC Editor Versions 1.3.8 and prior has a stack-based buffer overflow vulnerability has been identified that may allow arbitrary code execution...

8.8CVSS9.2AI score0.01749EPSS
Exploits0References1
NVD
NVD
added 2020/12/01 3:15 p.m.44 views

CVE-2020-25181

WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that may allow arbitrary code execution...

8.8CVSS9.4AI score0.01972EPSS
Exploits0References1
OSV
OSV
added 2020/12/01 3:15 p.m.7 views

CVE-2020-25177

WECON PLC Editor Versions 1.3.8 and prior has a stack-based buffer overflow vulnerability has been identified that may allow arbitrary code execution...

8.8CVSS7.8AI score0.01749EPSS
Exploits0References1
OSV
OSV
added 2020/12/01 3:15 p.m.7 views

CVE-2020-25181

WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that may allow arbitrary code execution...

8.8CVSS7.7AI score0.01972EPSS
Exploits0References1
Prion
Prion
added 2020/12/01 3:15 p.m.15 views

Heap overflow

WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that may allow arbitrary code execution...

6.8CVSS9.3AI score0.01972EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2020/12/01 3:15 p.m.15 views

Stack overflow

WECON PLC Editor Versions 1.3.8 and prior has a stack-based buffer overflow vulnerability has been identified that may allow arbitrary code execution...

6.8CVSS9.1AI score0.01749EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/01 2:54 p.m.51 views

CVE-2020-25181

WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that may allow arbitrary code execution...

9.4AI score0.01972EPSS
Exploits0References1
CVE
CVE
added 2020/12/01 2:54 p.m.53 views

CVE-2020-25181

Affected product: WECON PLC Editor (Versions 1.3.8 and prior). CVE-2020-25181 is a heap-based buffer overflow in the WCP file parsing path that may lead to arbitrary code execution. ZDI advisories describe remote code execution requiring user interaction (visit a malicious page or open a maliciou...

8.8CVSS9.3AI score0.01972EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/01 2:54 p.m.40 views

CVE-2020-25177

WECON PLC Editor Versions 1.3.8 and prior has a stack-based buffer overflow vulnerability has been identified that may allow arbitrary code execution...

9.1AI score0.01749EPSS
Exploits0References1
CVE
CVE
added 2020/12/01 2:54 p.m.51 views

CVE-2020-25177

CVE-2020-25177 affects WECON PLC Editor Versions 1.3.8 and prior. The vulnerability is a stack-based buffer overflow in WCP file parsing that may allow arbitrary code execution. ZDI describes it as remote code execution requiring user interaction via malicious WCP content, due to inadequate lengt...

8.8CVSS9.1AI score0.01749EPSS
Exploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2020/11/10 12:0 a.m.39 views

WECON PLC Editor WCP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

7.8CVSS5.6AI score0.01972EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/11/10 12:0 a.m.32 views

WECON PLC Editor WCP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

7.8CVSS5.6AI score0.01749EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/11/10 12:0 a.m.42 views

WECON PLC Editor WCP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

7.8CVSS5.6AI score0.01972EPSS
Exploits0References1
ICS
ICS
added 2020/11/05 12:0 a.m.49 views

WECON PLC Editor

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: WECON Equipment: PLC Editor Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute code under the...

8.8CVSS9.4AI score0.01972EPSS
Exploits0References5
CNVD
CNVD
added 2020/01/08 12:0 a.m.5 views

Buffer Overflow Vulnerability in WECON PLC Editor

WECON PLC Editor is a programming software for Programmable Logic Controllers PLC from WECON Technologies, China. A buffer overflow vulnerability exists in WECON PLC Editor, which can be exploited by an attacker to cause a denial of service or code execution with the privileges of the application...

7.8AI score
Exploits0
Rows per page
Query Builder