CVE-2020-16236: Out-of-bounds Read

FPWIN Pro is vulnerable to an out-of-bounds read vulnerability when a user opens a maliciously crafted project file, which may allow an attacker to remotely execute arbitrary code...

M&M Fdtcontainer Code Issue Vulnerability

M&M Fdtcontainer is a plug-and-play FDT framework application that can be customized to meet the needs of customers by China Meiming M&M. A code issue vulnerability exists in M&M fdtCONTAINER component Version 3, which can be exploited by an attacker to load a manipulated project file and malicio...

CVE-2020-27287

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

Delta Electronics CNCSoft ScreenEditor Buffer Overflow Vulnerability (CNVD-2021-03007)

Delta Electronics CNCSoft ScreenEditor is a CNC machine simulation system software. A buffer overflow vulnerability exists in the Delta Electronics CNCSoft ScreenEditor processing project file, which can be exploited by a remote attacker to submit a specially crafted request that can be used to...

PT-2021-11359

Name of the Vulnerable Software and Affected Versions: Delta Electronics DOPSoft versions 4.0.8.21 and prior Description: The issue is related to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code. Recommendations: For versions 4.0.8.21 an...

PT-2021-1698

Name of the Vulnerable Software and Affected Versions FPWIN Pro affected versions not specified Description The issue is related to an out-of-bounds read vulnerability. When a user opens a maliciously crafted project file, it may allow an attacker to remotely execute arbitrary code. This can be...

Design/Logic Flaw

An issue was discovered in Viki Vera 4.9.1.26180. A user without access to a project could download or upload project files by opening the Project URL directly in the browser after logging in...

Delta Electronics CNCSoft ScreenEditor 缓冲区错误漏洞

Delta Electronics CNCSoft ScreenEditor is a CNC machine simulation system software. A buffer overflow vulnerability exists in the Delta Electronics CNCSoft ScreenEditor processing project file, which can be exploited by a remote attacker to submit a specially crafted request that can be used to...

CVE-2020-25188

An attacker who convinces a valid user to open a specially crafted project file to exploit could execute code under the privileges of the application due to an out-of-bounds read vulnerability on the LAquis SCADA Versions prior to 4.3.1.870...

Design/Logic Flaw

An attacker who convinces a valid user to open a specially crafted project file to exploit could execute code under the privileges of the application due to an out-of-bounds read vulnerability on the LAquis SCADA Versions prior to 4.3.1.870...

CVE-2020-25188: Out-of-bounds Read

An attacker who convinces a valid user to open a specially crafted project file to exploit could execute code under the privileges of the application due to an out-of-bounds read vulnerability on the LAquis SCADA Versions prior to 4.3.1.870...

PT-2020-16004

Name of the Vulnerable Software and Affected Versions LAquis SCADA versions prior to 4.3.1.870 Description The issue allows an attacker to execute code under the privileges of the application due to an out-of-bounds read vulnerability. This can be exploited when a valid user opens a specially...

PT-2020-4434

Name of the Vulnerable Software and Affected Versions: Yokogawa WideField3 versions R1.01 through R4.03 Description: The issue is related to a buffer overflow in memory. This could allow an attacker to cause a denial of service when a maliciously crafted project file is loaded. Recommendations: F...

CVE-2020-7528

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect V3.6.3.574 and prior which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer...

Advantech WebAccess HMI Designer Type Obfuscation Vulnerability

Advantech WebAccess HMI Designer is an integrated HMI development tool from Advantech, Taiwan, China. The product is equipped with features such as data transfer, menu editing and text editing. A type confusion vulnerability exists in Advantech WebAccess HMI Designer version 2.1.9.31 and prior...

CVE-2020-16221

Delta Electronics TPEditor Versions 1.97 and prior. A stack-based buffer overflow may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execute arbitrary code, and/or crash the application...

CVE-2020-16225

Delta Electronics TPEditor Versions 1.97 and prior. A write-what-where condition may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execute arbitrary code, and/or crash the application...

CVE-2020-16227

Delta Electronics TPEditor Versions 1.97 and prior. An improper input validation may be exploited by processing a specially crafted project file not validated when the data is entered by a user. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execut...

Heap overflow

Delta Electronics TPEditor Versions 1.97 and prior. A heap-based buffer overflow may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execute arbitrary code, and/or crash the application...

Stack overflow

Delta Electronics TPEditor Versions 1.97 and prior. A stack-based buffer overflow may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execute arbitrary code, and/or crash the application...