1157 matches found
PT-2021-20017
Name of the Vulnerable Software and Affected Versions Delta Electronics TPEditor versions 1.98.06 and prior Description A heap-based buffer overflow may be exploited by processing a specially crafted project file, potentially allowing an attacker to execute arbitrary code. Recommendations For...
Delta Electronics DOPSoft缓冲区错误漏洞
DOPSoft is a Human Machine Interface HMI programming software from Delta Electronics. A stack buffer overflow vulnerability exists in DOPSoft 4.00.11 and earlier versions. The vulnerability can be exploited by an attacker to execute arbitrary code via a specially crafted project file...
PT-2021-3877
Name of the Vulnerable Software and Affected Versions DOPSoft versions 4.00.11 and prior Description A stack-based buffer overflow issue may be exploited by processing a specially crafted project file, allowing an attacker to execute arbitrary code. This issue is related to the processing of...
CVE-2021-32975
Cscape All Versions prior to 9.90 SP5 lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process...
CVE-2021-33015
Cscape All Versions prior to 9.90 SP5 lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write via an uninitialized pointer. An attacker could leverage this vulnerability to execute code in the context of the current process...
CVE-2021-32995
Cscape All Versions prior to 9.90 SP5 lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute code in the context of the current process...
PT-2021-20004
Name of the Vulnerable Software and Affected Versions Cscape versions prior to 9.90 SP5 Description The issue arises from a lack of proper validation of user-supplied data when parsing project files, potentially leading to an out-of-bounds read. This could allow an attacker to execute code in the...
PT-2021-20012
Name of the Vulnerable Software and Affected Versions Cscape versions prior to 9.90 SP5 Description The issue is related to the lack of proper validation of user-supplied data when parsing project files, which could lead to an out-of-bounds write. This allows an attacker to execute code in the...
CVE-2021-32995: Out-of-bounds Write
Cscape All Versions prior to 9.90 SP5 lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute code in the context of the current process...
Horner Automation Cscape 缓冲区错误漏洞
Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A buffer error vulnerability exists in Horner Automation Cscape, which arises when the product does not validate the validity of a pointer when parsing a project file, and...
Horner Automation Cscape 缓冲区错误漏洞
Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. Horner Automation Cscape suffers from a buffer error vulnerability that stems from a lack of proper validation of user-supplied data by the affected application when parsi...
Out-of-bounds
FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a project file that may permit arbitrary code execution...
CVE-2021-32931: Access of Uninitialized Pointer
An uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be exploited while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution...
PT-2021-7778
Name of the Vulnerable Software and Affected Versions Modicon M580 CPU versions all Modicon M340 CPU versions all Modicon MC80 versions all Modicon Momentum Ethernet CPU versions all PLC Simulator for EcoStruxure Control Expert versions all PLC Simulator for EcoStruxure Process Expert versions al...
PT-2021-7828
Name of the Vulnerable Software and Affected Versions Modicon M580 CPU versions all Modicon M340 CPU versions all Modicon MC80 versions all Modicon Momentum Ethernet CPU versions all PLC Simulator for EcoStruxure Control Expert versions all PLC Simulator for EcoStruxure Process Expert versions al...
PT-2021-7829
Name of the Vulnerable Software and Affected Versions Modicon M580 CPU versions all Modicon M340 CPU versions all Modicon MC80 versions all Modicon Momentum Ethernet CPU versions all PLC Simulator for EcoStruxure Control Expert versions all PLC Simulator for EcoStruxure Process Expert versions al...
PT-2021-7830
Name of the Vulnerable Software and Affected Versions Modicon M580 CPU versions all Modicon M340 CPU versions all Modicon MC80 versions all Modicon Momentum Ethernet CPU versions all PLC Simulator for EcoStruxure Control Expert versions all PLC Simulator for EcoStruxure Process Expert versions al...
FATEK Automation FvDesigner Buffer Overflow Vulnerability
FATEK Automation FvDesigner is a human-computer interaction device from FATEK Automation. A buffer overflow vulnerability exists in FATEK Automation FvDesigner versions 1.5.88 and earlier, which can be exploited by an attacker to create a special project file that allows arbitrary code execution...
FATEK Automation FvDesigner 缓冲区错误漏洞
FATEK Automation FvDesigner is a human-computer interaction device from FATEK Automation. A buffer overflow vulnerability exists in FATEK Automation FvDesigner versions 1.5.88 and earlier, which can be exploited by an attacker to create a special project file that allows arbitrary code execution...