CVE-2022-27580

A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions up to and including 1.11.0 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the privileges ...

PT-2022-3926 · Unknown · Alpha7 Pc Loader

Name of the Vulnerable Software and Affected Versions: Alpha7 PC Loader All versions Description: The issue is caused by a stack-based buffer overflow that occurs when processing a specifically crafted project file. This may allow an attacker to execute arbitrary code. The exploitation of this...

Vulnerability in SICK Flexi Soft Designer & Safety Designer

A deserialization vulnerability in a .NET framework class used by both SICK Flexi Soft Designer and SICK Safety Designer allows an attacker to create malicious project files...

CVE-2022-1331

In four instances DMARS All versions prior to v2.1.10.24 does not properly restrict references of XML external entities while processing specific project files, which may allow unauthorized information disclosure...

Delta Electronics ASDA-Soft 缓冲区错误漏洞

Delta Electronics ASDA-Soft is an AC servo motor from Delta Electronics, a Taiwan, China-based company. A buffer error vulnerability exists in Delta Electronics ASDA-Soft, which can occur due to out-of-bounds writes when the affected product does not properly clear inputs when processing specific...

Delta Electronics ASDA-Soft缓冲区错误漏洞

Delta Electronics ASDA-Soft is an AC servo motor from Delta Electronics, a Taiwan, China-based company. The Delta Electronics ASDA-Soft suffers from a buffer error vulnerability that arises from affected products not properly clearing inputs when processing specific project files, which could...

Delta Electronics DMARS 代码问题漏洞

Delta Electronics DMARS is an Industrial Automation/Embedded Motion Controller from Delta Electronics Taiwan, China. A code issue vulnerability exists in Delta Electronics DMARS that stems from affected products not properly restricting references to XML external entities when processing specific...

Omron CX-Position 缓冲区错误漏洞

Omron CX-Position is a position control software from Omron Japan. It simplifies all aspects of position control, from creating/editing data used in position control units NC units to online communication and monitoring operations. Omron CX-Position suffers from a buffer error vulnerability that...

CVE-2021-44462

This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior. The issues result from the lack of proper validation of user-supplied data, which can result in reads and writes past the end of allocated data structures...

CVE-2021-44462

This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior. The issues result from the lack of proper validation of user-supplied data, which can result in reads and writes past the end of allocated data structures...

Design/Logic Flaw

This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior. The issues result from the lack of proper validation of user-supplied data, which can result in reads and writes past the end of allocated data structures...

CVE-2021-44462 Horner Automation Cscape EnvisionRV Improper Input Validation

This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior. The issues result from the lack of proper validation of user-supplied data, which can result in reads and writes past the end of allocated data structures...

The vulnerability of the Yokogawa CENTUM VP SCADA system, related to errors in the code, allows a intruder to execute arbitrary commands.

The vulnerability of the Yokogawa CENTUM VP SCADA system is related to errors in the code. Exploiting this vulnerability allows an intruder to execute arbitrary code by modifying the project files and injecting their own code into them, which will be executed upon a specified event...

CVE-2022-25170

The affected product is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2022-23985

The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...

CVE-2022-23985

The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...

CVE-2022-21209

The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...

CVE-2022-21209

The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...

Out-of-bounds

The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...

Stack overflow

The affected product is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...