Wecon LeviStudioU Information Disclosure Vulnerability

Wecon LeviStudioU is a set of HMI programming software from Wecon Technologies, China. A security vulnerability exists in the handling of project files in Wecon LeviStudioU, which stems from an improper restriction of references to XML external entities. The vulnerability can be exploited by a...

CVE-2018-14824

Delta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read vulnerability that can be executed when processing project files, which may allow an attacker to read confidential information...

CVE-2018-14824

Delta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read vulnerability that can be executed when processing project files, which may allow an attacker to read confidential information...

Out-of-bounds

Delta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read vulnerability that can be executed when processing project files, which may allow an attacker to read confidential information...

CVE-2018-10606

WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple heap-based buffer overflow vulnerabilities that can be exploited when the application processes specially crafted project files...

Heap overflow

WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple heap-based buffer overflow vulnerabilities that can be exploited when the application processes specially crafted project files...

CVE-2018-10606

WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple heap-based buffer overflow vulnerabilities that can be exploited when the application processes specially crafted project files...

Stack overflow

WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple stack-based buffer overflow vulnerabilities that can be exploited when the application processes specially crafted project files...

CVE-2018-10602

WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple stack-based buffer overflow vulnerabilities that can be exploited when the application processes specially crafted project files...

CVE-2018-10602

WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple stack-based buffer overflow vulnerabilities that can be exploited when the application processes specially crafted project files...

CVE-2018-10602

The CVE-2018-10602 entry maps to WECON LeviStudio products (notably LeviStudioU) with multiple stack-based buffer overflow vulnerabilities triggered when processing specially crafted project/files. Connected sources detail several distinct, file-parsing flaws that can lead to remote code executio...

CVE-2018-10606

WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple heap-based buffer overflow vulnerabilities that can be exploited when the application processes specially crafted project files...

CVE-2018-10602

WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple stack-based buffer overflow vulnerabilities that can be exploited when the application processes specially crafted project files...

CVE-2018-14792

WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files...

CVE-2018-14792

WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files...

CVE-2018-10598

CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read vulnerabilities could cause the software to crash due to lacking user input validation for processing project files. Which may allow an attacker to gain remote code execution with administrator privileg...

Stack overflow

CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to crash due to lacking user input validation before copying data from project files onto the stack. Which may allow an attacker to gain remot...

Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Visual Studio software when the software does not check the source code of a file for an unbuilt project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is...

Memory Corruption Vulnerability in All-in-One Machine Configuration Software 2.0 of Shenzhen Hanglisheng Technology Co.

Ltd. has been committed to industrial automation product development, production and sales since its inception. The company was formerly a trading company specializing in the agency of foreign industrial control products. There is a memory corruption vulnerability in HMICreator-V2.0, the all-in-o...

CVE-2018-10832

ModbusPal 1.6b is vulnerable to an XML External Entity XXE attack. Projects are saved as .xmpp files and automations can be exported as .xmpa files, both XML-based, which are vulnerable to XXE injection. Sending a crafted .xmpp or .xmpa file to a user, when opened/imported in ModbusPal, will retu...