137 matches found
CoDeSys Web Server Code Execution
The vulnerability of the web server of the CoDeSys PLC programming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using a specially crafted request...
Omron CJ2M CX-Programmer Reversible Password Encoding
The vulnerability of the development environment “CX-Programmer,” which is part of the software suite “CX-One” designed for programming and configuring Omron PLCs, as well as Omron microcontrollers like CJ2M and CJ2H, is related to the reversibility of the password encoding method. Exploiting thi...
CVE-2017-14020
In AutomationDirect CLICK Programming Software Part Number C0-PGMSW Versions 2.10 and prior; C-More Programming Software Part Number EA9-PGMSW Versions 6.30 and prior; C-More Micro Part Number EA-PGMSW Versions 4.20.01.0 and prior; Do-more Designer Software Part Number DM-PGMSW Versions 2.0.3 and...
CVE-2017-14020
CVE-2017-14020 affects AutomationDirect products including CLICK Programming Software (C0-PGMSW) <= v2.10, C-More Programming Software (EA9-PGMSW) <= v6.30, C-More Micro (EA-PGMSW) <= v4.20.01.0, Do-more Designer (DM-PGMSW) <= v2.0.3, GS Drives (GSOFT) <= v4.0.6, SL-SOFT SOLO (SL-S...
CVE-2017-14020
In AutomationDirect CLICK Programming Software Part Number C0-PGMSW Versions 2.10 and prior; C-More Programming Software Part Number EA9-PGMSW Versions 6.30 and prior; C-More Micro Part Number EA-PGMSW Versions 4.20.01.0 and prior; Do-more Designer Software Part Number DM-PGMSW Versions 2.0.3 and...
CVE-2017-14020: Uncontrolled Search Path Element
In AutomationDirect CLICK Programming Software Part Number C0-PGMSW Versions 2.10 and prior; C-More Programming Software Part Number EA9-PGMSW Versions 6.30 and prior; C-More Micro Part Number EA-PGMSW Versions 4.20.01.0 and prior; Do-more Designer Software Part Number DM-PGMSW Versions 2.0.3 and...
PT-2017-13205
Name of the Vulnerable Software and Affected Versions AutomationDirect CLICK Programming Software versions 2.10 and prior C-More Programming Software versions 6.30 and prior C-More Micro versions 4.20.01.0 and prior Do-more Designer Software versions 2.0.3 and prior GS Drives Configuration Softwa...
Wecon Technologies LEVI Studio HMI Editor
CVSS v3 8.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Wecon Technologies Equipment: LEVI Studio HMI Editor Vulnerabilities: Heap-Based Buffer Overflow, Stack-Based Buffer Overflow AFFECTED PRODUCTS The following versions of LEVI Studio HMI Editor, a HMI programming...
Memory Corruption Vulnerability in Delta PLC Programming Software (Delta WPLSoft) Handling DVP Format
Delta PLC Programming Software Delta WPLSoft is a programming software. Delta PLC Programming Software Delta WPLSoft has a memory corruption vulnerability in the handling of DVP format files, which allows an attacker to construct a malformed DVP format that can cause a program to crash, and if...
CVE-2016-4529
Schneider Electric SoMachine HVAC programming software for M171/M172 Controllers contains an unsafe ActiveX control (AxEditGrid) with a SetDataIntf dereference vulnerability. The flaw allows remote code execution via an attacker-supplied memory address in the untrusted pointer dereference within ...
CVE-2016-4529
An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers before 2.1.0 allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFEFORUNTRUSTEDCALLER aka safe for scripting flag...
CVE-2016-4529: Undefined Security Weakness
An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers before 2.1.0 allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFEFORUNTRUSTEDCALLER aka safe for scripting flag...
PT-2016-6003
Name of the Vulnerable Software and Affected Versions Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers versions prior to 2.1.0 Description The issue allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFE FOR UNTRUSTED...
WECON LeviStudio Stack Buffer Overflow Vulnerability
WECON LeviStudio is HMI programming software. WECON LeviStudio handles a stack buffer overflow vulnerability in certain files that could allow an attacker to cause a stack buffer overflow and execute arbitrary code in the context of the current process...
Eaton ELCSoft Programming Software Heap Buffer Overflow Vulnerability
Eaton ELCSoft Programming Software is a suite of software for configuring programmable logic controllers from Eaton Corporation, USA. A heap buffer overflow vulnerability exists in Eaton ELCSoft Programming Software version 2.4.01 and earlier. A remote attacker could exploit this vulnerability to...
