PT-2019-18144

Name of the Vulnerable Software and Affected Versions Panasonic FPWIN Pro version 7.3.0.0 and prior Description The issue allows an attacker-created project file to be loaded by an authenticated user, triggering incompatible type errors because the resource does not have expected properties. This...

The vulnerability of Siemens SIMATIC product software lies in insufficient validation of input data, allowing attackers to execute arbitrary system commands.

The vulnerability of Siemens SIMATIC software products is related to insufficient validation of input data. Exploiting this vulnerability could allow an intruder with access to project files to execute arbitrary system commands with database privileges...

CVE-2019-10917

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier All versions, SIMATIC PCS 7 V8.1 All versions V8.1 with WinCC V7.3 Upd 19, SIMATIC PCS 7 V8.2 All versions V8.2 SP1 with WinCC V7.4 SP1 Upd11, SIMATIC PCS 7 V9.0 All versions V9.0 SP2 with WinCC V7.4 SP1 Upd11, SIMATIC WinCC TI...

CVE-2019-10916

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier All versions, SIMATIC PCS 7 V8.1 All versions V8.1 with WinCC V7.3 Upd 19, SIMATIC PCS 7 V8.2 All versions V8.2 SP1 with WinCC V7.4 SP1 Upd11, SIMATIC PCS 7 V9.0 All versions V9.0 SP2 with WinCC V7.4 SP1 Upd11, SIMATIC WinCC TI...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier All versions, SIMATIC PCS 7 V8.1 All versions V8.1 with WinCC V7.3 Upd 19, SIMATIC PCS 7 V8.2 All versions V8.2 SP1 with WinCC V7.4 SP1 Upd11, SIMATIC PCS 7 V9.0 All versions V9.0 SP2 with WinCC V7.4 SP1 Upd11, SIMATIC WinCC TI...

PT-2019-2285

Name of the Vulnerable Software and Affected Versions LOGO! Soft Comfort versions prior to V8.3 Description A vulnerability has been identified that could allow an attacker to execute arbitrary code if a legitimate user opens a manipulated project file. No further privileges are required on the...

CVE-2019-10917: Uncaught Exception

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier All versions, SIMATIC PCS 7 V8.1 All versions V8.1 with WinCC V7.3 Upd 19, SIMATIC PCS 7 V8.2 All versions V8.2 SP1 with WinCC V7.4 SP1 Upd11, SIMATIC PCS 7 V9.0 All versions V9.0 SP2 with WinCC V7.4 SP1 Upd11, SIMATIC WinCC TI...

CVE-2019-10916: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier All versions, SIMATIC PCS 7 V8.1 All versions V8.1 with WinCC V7.3 Upd 19, SIMATIC PCS 7 V8.2 All versions V8.2 SP1 with WinCC V7.4 SP1 Upd11, SIMATIC PCS 7 V9.0 All versions V9.0 SP2 with WinCC V7.4 SP1 Upd11, SIMATIC WinCC TI...

CVE-2019-10924: Deserialization of Untrusted Data

A vulnerability has been identified in LOGO! Soft Comfort All versions V8.3. The vulnerability could allow an attacker to execute arbitrary code if the attacker tricks a legitimate user to open a manipulated project. In order to exploit the vulnerability, a valid user must open a manipulated...

Stack Overflow Vulnerability in WinProladder pdw Project File at Yonghong

Ltd. is a company founded by a group of engineers engaged in PLC design and development. A stack overflow vulnerability exists in the Yonghong WinProladder pdw project file, which can be exploited by attackers to execute malicious code...

Memory corruption vulnerability in Yonghong FD300 fpj project file

YHM Taiwan specializes in the highly functional small, medium and micro PLC market segments. A memory corruption vulnerability exists in the Yonghong FD300 fpj project file, which allows an attacker to trick a user into opening a malicious fpj file, executing malicious code, and ultimately gainin...

Memory Corruption Vulnerability in SKTOOL

SKTOOL is a configuration software produced by Shenzhen Xianzhong Technology Co. SKTOOL has a memory corruption vulnerability in the handling of skm project files, which can be exploited by attackers to gain control of a user's system or crash the program...

Memory Corruption Vulnerability in LSIS Configuration Software

LSIS configuration software is a configuration software of LeStar Industrial Electronics Wuxi Co. A memory corruption vulnerability exists in the mce project file handling of LSIS configuration software, which can be exploited by attackers to execute malicious code...

Memory Corruption Vulnerability in Huichuan HTodEditor htd Project File

Shenzhen Huichuan Technology Co., Ltd. is a company mainly engaged in the research and development, production and sales of industrial automation control products, positioned to serve the middle and high-end equipment manufacturers. A memory corruption vulnerability exists in the Huichuan...

Memory Corruption Vulnerability in Kovac HMIStudio hs Project File

Huangshi Kewei Automatic Control Co., Ltd. is a company mainly engaged in microelectronic products, automation instrumentation development and application and related engineering supporting services and other projects. A memory corruption vulnerability exists in the Kewe HMIStudio hs project file...

Memory Corruption Vulnerability in dp2 Project File of Xinjie OP20 Screen Setting Tool

Wuxi Xinjie Electric Co., Ltd. is a well-known domestic enterprise focusing on the research, development and application of industrial automation products. A memory corruption vulnerability exists in the dp2 project file of the Xinjie OP20 screen setup tool, which can be exploited by attackers to...

Stack Overflow Vulnerability in delta ScreenEditor dop Project File

Delta Electronics Group is a provider of total solutions for power management, video displays, industrial automation, automotive electronics, network communication products and renewable energy related products. A stack overflow vulnerability exists in the delta ScreenEditor dop project file, whi...

CVE-2019-6556

When processing project files, the application Omron CX-Programmer v9.70 and prior and Common Components January 2019 and prior fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the...

PT-2019-18164

Name of the Vulnerable Software and Affected Versions Omron CX-Programmer versions 9.70 and prior Common Components versions January 2019 and prior Description The issue arises when the application processes project files, specifically due to a failure in checking references to freed memory. This...

CVE-2019-6556: Use After Free

When processing project files, the application Omron CX-Programmer v9.70 and prior and Common Components January 2019 and prior fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the...